DEPARTMENT OF DEFENSE i 

I 

AND I 

CENTRAL INTELLIGENCE AGENCY ^ 

i 

--- ^- > 

I 

I 

I 



NATIONAL RECONNAISSANCE OFFICE ^ ■ 

V l 


\ 

\ 

INSPECTION REPORT No. 96-014 (U) 






vr\#vwiw\:v ifiH UlJ^lll I 


.•^w, f 






i>. 


Handle Via 

B I'g MAm r T ALeN T -KET H OLB 

Control Channels 


oconcT 


CIA-IG~96-1087 

COPY 38 OF 1^ no PIES 
CLASSIFIED BY: |£g]2H 
OCL REASON; 1.E(c) 

OECL XI 

DRV FROM; MUtriPLE SOURCES 



















a iBeWE r -B T B B M T^ i T ALRiri 


23 July 1996 


MEMORANDUM FOR DIRECTOR, NATIONAL RECONNAISSANCE OFFICE 

DIRECTOR, ADMINISTRATION AND MANAGEMENT. 
OFFICE OF THE SECRETARY OF DEFENSE 

SUBJECT: Final Report on the Inspection of the National Reconnaissance Office (Report 
No. 96-014) (U) 


(U) This is the Enal report on the inspection of the National Reconnaissance Office 
(NRO) conducted jointly by the Inspectors General, Department of Defense (DoD) and Central 
Intelligence Agency (CIA). The goal of this inspection was to evaluate the efficiency and 
effectiveness of the management processes used by the NRO. 

(U) The NRO management responded to our findings and recommendations in positive 
and constructive terms. Their comments on the draft of this report were considered and are 
reflected in the final report. 

(U) We appreciate the efforts extended by the Director, NRO, and his staff in 
responding to the draft report. Management's comments appropriately addressed most of the 
findings and recommendations. Further response is required on Recommendations 1, 12, 13, 
18^ 22, 23, 25, 27, 33, 35, and 37. Director, NRO, action on Recommendation 4 is deferred 
until after receipt of an Office of General Counsel, DoD, response, expected by October 1, 
1996. At that time, the DoD/IG and CIA/IG will assess the response and determine what 
actions are required. 


(U) Please forward your responses to the above recommendations within 30 days of 
receipt of this report to the Assistant Inspector General for Policy and Oversight, Inspector 
General, DoD, 400 Army Navy Drive, Arlington, Virginia 22202-2884. 


(U) We appreciate the courtesies extended to the insgectio^eamM^oinieed 
additional infomiation regarding the report, please contact 

Intelligence Review Directorate, Office of the Assistant Inspector Gener ^ for Policy and 
Oyersy ht. Inspector General, DoD, at (703) 604 -8873. DSN 664 -8873. f 
B3BIM. Office of the Inspector General. CIA, at^ 


(bH1){c) (b)(3) 



rreaencK r 
Inspector General 
Central Intelligence Agency 


Eleanor Hill 
Inspector General 
Department of Defense 
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cc: 

Under Secretary of Defense for Acquisition and Technology 
Under Secretary of Defense (Comptroller/Chief Financial Officer) 
Assistant Secretary of Defense (Command, Control, Communications, 
and Intelligence) 

Deputy Undcrsceretary of Defense for Space 

General Counsel of the Department of Defense 

Assistant to the Secretary of Defense for Intelligence Oversight 

Director, National Security Agency 

Inspector General, Department of the Army 

Inspeetor General, Department of the Navy 

Inspector General, Department of the Air Force 

Inspector General, National Reconnaissance Office 

Inspector General, National Security Agency 


Director of Central Intelligence 
Deputy Director of Central Intelligence 
Chief of Staff, Central Intelligence Agency 
Executive Director, Central Intelligence Agency 
Deputy Director for Science and Technology, Central 
Intelligence Agency 

Comptroller, Central Intelligence Agency 
General Counsel, Central Intelligence Agency 


Director, 
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|, Deputy Director 


for Science and Technology, Central Intelligence Agency 


Executive Director, Intelligence Community Affairs 

Chairman, Committee on Armed Serviees, United States Senate 
Ranking Minority Member, Committee on Armed Services, United 
States Senate 

Chairman, Committee on Appropriations, United States Senate 
Ranking Minority Member, Committee on Appropriations, United 
States Senate 

Chairman, Select Committee on Intelligence, United States Senate 
Vice Chairman, Select Committee on Intelligence, United States 
Senate 


Chairman. Committee on National Security, House of 
Representatives 

Ranking Minority Member, Committee on National Security, House of 
Representatives 

Chairman, Committee on Appropriations, House of 
Representatives 

Ranking Minority Member, Committee on Appropriations, House of 
Representatives 

Chairman. Permanent Select Committee on Intelligence, House of 
Representatives 

Ranking Minority Member, Permanent Select Committee on 
Intelligence, House of Representatives 
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EXECUTIVE SUMMARY 


EXECUTIVE SUMMARY (U) 


(U) INSPECTION 
GOAL AND 
OBJECTIVES 


(U) The Inspectors General. Department of Defense and 
Central Intelligence Agency, conducted a joint inspection of the 
National Reconnaissance Office (NRO) from Octobci’ through 
December 1995. The goal of the inspection was to determine the 
efficiency and effectiveness of the processes and mechanisms used 
to manage and administer NRO resources and administrative 
programs. The objectives were to: evaluate the authorities and 
delegations of the NRO and oversight organizations: evaluate the 
processes used to identify mission requirements and plan and 
organize resources for them: evaluate internal administrative and 
management programs; and, evaluate internal management 
oversight processes. 


(U) METHODOLOGY 


(U) SYNOPSIS 


(U) EFFECTIVE 
PROCESSES 


The inspection team conducted intervie ws und collected 


data at <*^g_NRQ_hcadq ijiartcrs facilities^ the _ 

AIso. HTc team sent 
su^ey^^OTTOR^empIoyee^ovcnng topics such as: mission 
and organization; supervision, management, and leadership; and 
personnel issues. The inspection team conducted interviews and 
gathered data from the organizations which contribute personnel to 
the NRO and surveyed NRO customers and product users. Finally, 
the inspection team interviewed personnel at organizations having 
oversight responsibilities for the NRO. 


(U) If a single phrase could capture the ethos of the NRO as we 
found it, it would be: "It's the mission that’s important." The 
employees, management, and leadership of the NRO maintain a 
singular focus on the mission of development and operation of 
satellite reconnaissance systems. The NRO continues to transition 
from a federation of geographically separated, sometimes 
competing, program offices--each with a distinct culture and way 
of doing busincsS"to an organization which has consolidated 
programs, a more cohesive work force, and a central headquarters 
facility. 

(U) The team found the NRO is particularly effective in 
management of processes directly related to the development and 
operation of satellite reconnaissance systems, their core business. 
We found other effective processes: mechanisms and tools to 
oversee satellite systems development: mechanisms to determine 
and prioritize mission requirements; and procedures to acquire and 
manage automated information and communication systems. 


(U) AREAS NEEDING 
SENIOR 
MANAGEMENT 
ATTENTION 


In contrast, the team judged senior NRO officials to 
be lax in the management of the support and administrative 
infrastructure. In these areas, policies and procedures are not well 
defined or communicated to employees, and employees are 
uncertain of their roles and responsibilities. The team 
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EXECUTIVE SUMMARY 


(ID AUTHORITIES 
AND DELEGATIONS 


(U) MAJOR 
INADEQUACIES 

(U) Property 
Accountability 


(U) Oversight 


(U) Infrastructure 
Support Monitoring 


(U) Civilian 
Personnel System 


it 


acknowledges the NRO management faces a challenge to balance 
mission focus with reasonable attention to oversight of 
administrative and support functions. 

The authorities and delegations for the NRO. the 
organizations providing support, and the organizations providing 
oversight, do not facilitate effective mission accomplishment. The 
charter documents arc written in vague and general terms and 
contain five specific weaknesses. Specifically, the following points 
arc not adequately defined; 

- Responsibilities of the SECDEF. DCI, or DNRO; 

- The DNRO's chain-of-command; 

- Relationships between the NRO and the present external 
oversight structure; 

- The organizational status of the NRO: and 

- The DNRO's administrative authorilic.s. 

While senior management of the NRO views thc.se 
wcaicnesses as opportunitie.s. allowing for flexibility and avoiding 
bureaucratic con.siraints. they also contribute to conflicting, 
inconsistent, and inadequate policies and direction. 

(POfWr We found four areas with major inadequacies. First, 
the NRO doe.s not have adequate proccs.scs and mechanisms to 
account for property. While the NRO maintains well established 
procedures for requisition and approval of logistical needs througlt 
both government and commercial sources, the NRO docs not have 
a propeny accountability program. 

Second, we found the former NRO Inspector General 
did not provide effective oversight of the organization. The former 
DNRO lacked confidence in the Inspector General to provide 
balance between effective oversight and the imposition of 
perceived additional burdensome procedures. The Inspector 
General did not fully utilize the staff and did not consistently 
follow-up to ensure audit and in-spcction recommendations wcie 
implemented. 

(THPCJ) Third, while the NRO maintains excellent procc.sses 
to monitor direct mission related activities, they do not have 
equivalent monitoring mechanisms or performance measurement 
indicators for the infrastructure support functions. We found the 
Internal Management Control Program is not fully implemented 
due to a lack of commitment to a standardized program, 
incomplete training, non-standard vulnerability asse.ssmcnts. and 
inadequate documentation. 

(POUO) Fourth, while we found the NRO has technically 
adequate processes, mechanisms and management systems to 
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(U) NOTABLE 
INADEQUACIES 


(U) Security 


(U) EEO 


(U) Manpower 
Requirements 


(U) AREAS NEEDING 
IMPROVEMENT 


EXECUTIVE SUMMARY 


support civilian personnel, the multiple civilian personnel systems 
u.scd do not support the NRO goal of a consolidated, cohesive 
work force. We judge a single civilian personnel system, 
implemented over a period of a few years, would support this 
organizational goal in the long term. Currently, no memoranda of 
aj^cement exist between the NRO and the agencies providing 
personnel services to define responsibilities. Further, the NRO 
internal rca.s.signmcnt process is inadecjuatc because of the inherent 
disparity of considering DoD rank-in-position candidates and CIA 
rank-in-person candidates for the same positions. Differences in 
promotions and awards, while technically managed in accorilance 
with parent organization regulations, do not contribute to a 
consolidated, cohesive work force. 


In addition to the four areas with major inadequacies 
noted above, the team found notable inadequacies in three other 
areas. 


^6^) First, while the NRO maintains adequate processes to 
manage security requirements, the NRO needs significant 
improvement in providing basic security policy guidance. We 
found confusion about the currency and a pplicability of the 
NRO/NRP Directives recardine security 


OSD - (b)(1) EO 13526 Section 3.3(1) 


OSD-(b)(1) EO 


their knowledge and use of .security classification requirements. 
The well-trained and motivated security personnel, with their 
superior abilities and wealth of security experience, make the 
system work despite the noted deficiencies. 


Second, the NRO docs not maintain an Equal Employment 
Opportunity (EEO) program in accordance with DoD Directives. 
The NRO relics on the parent organizations of the personnel to 
fulfill these responsibilities. The NRO docs not have a Director of 
EEO to bring discrimination and harassment is.sucs to the attention 
of senior management nor diversity managers to publicize the 
contributions of minorities. We judge NRO employees do not 
have ready access to the required full range of EEO support. 


Third, the NRO docs not have an adequate manpower 
requirements process. We found the NRO lacks a well defined and 
documented process to determine, validate, and manage manpower 
needs. The NRO relics on an informal, undocumented sy.stem 
where senior management groups periodically address manpower 
needs and request adjustments through the DNRO. 


( FQUO ) There were several areas in which we found the NRO 
overall had adequate processes in place, but there were some 
inadequacies of note. These include the contract management 
process and the military manpower management process. 

(6) The contracts management sy.stem maintains overall 
adequate processes and mechanisms to monitor and manage its 
contracts with the exception of: certifying funding documentation: 
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EXECUTIVE SUMMARY 


payment and invoicing procedures tor cost reimbursement 
contracts: definition of Contracting Officer's Technical 
Representative responsibilities: and procedures for monitoring 
some aspects of the operations and maintenance contractor for the 
headquarters facilities. In addition, the NRO currently contends 
with three disparate contracting systems and is developing u single 
NRO Acquisition Manual. 

) There are technically adequate processes to support 
military personnel and meet the needs of the NRO. Like civilian 
personnel management, the NRO military personnel management 
system would benefit by establishing or updating memoranda of 
agreement with the Services to clearly identify roles and 
responsibilities of the Military Services and the .NRO. The 
military personnel management .system needs a process to monitor 
the support provided by both NRO and the parent Military Service. 


I •. 
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ISTRODVCTIOS 


INTRODUCTION (U) 


BACKGROUND (U) 


(U) MISSION (U) The mission of the National Reconnaissance Office (NRO) 

is to ensure the United States has the technology and satellite 
reconnaissance systems needed to acquire superior intelligence in 
war and peace. The NRO accomplishes this mission through 
development, acquisition, and operation of spacebome data 
collection .systems. The NRO supports the monitoring of aims 
agreements, indications and warning, and the planning and conduct 
of military operations. 

(U) The NRO traces its origins to the late 195()s. In ly.^S. the 
National Security Council (NSC) issued a memorandum directing 
the Department of Defense (DoD) to develop an operational 
reconnaissance satellite to augment the existing aircraft 
reconnaissance program. In 1960. the U.S. .succc.ssfully launched 
its first imagery and signals intelligence satellites. That same year 
the Reconnaissance Satellite Program was created under the 
Secretary of Defense (SECDEF), 

The Reconnaissance Satellite Program became the 
NRO in 1961. A series of DoD and Central Intelligence Agency 
(CIA) agreements between 1961 and 1965 further defined the 
NRO. The agreements intended a consolidated program to 
develop and operate satellite and air vehicle projects for 
inielligcncc. geodesy and mapping, photography, and electronic 
signal collection. The Director of the NRO (DNRO) was 
dcsignjiied the manager of the National Reconnaissance Program 
(NRP). the single naRonal program to meet consumer intelligence 
and operations support needs through satellite reconnaissance. 
DoD Directive TS-5105.23. "NationarRcconnaissancc Office". 27 
.March 1964. serves as the DoD chartering document and 
designates the NRO as an operating agency within the DoD. 


(LI) Evolution of the 
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competitive practices led to examinations of the NRO business 
practices by both internal and external groups. 


(LI) Historical 
Background 
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INTRODUCTION 


(U) STRUCTURE 


(U) In 1989. based on recommendations from the NRO- 
chartered Gcigcr/Kclly Study, the DNRO. SECDEF. and DCl 
agreed to initfatc an NRO reorganization. Key elements of the 
study included: 

- Creation of the National Reconnai.ssancc Review Board to 
advise the SECDEF. DCI and DNRO; 

- Establishment of a Plans and Analysis Office: 

- Creation of the Deputy Director for Military Support 
position: and. 

- Initiation of collocation activities for NRO elements. 

(U) In March 1992, the DCI formed a panel led by Robert 
Fuhrman to a.sscss the NRO structure, management methodology, 
and ability to respond to Intelligence Community needs. In mid- 
1992 the DNRO. in coordination with the DCI. SECDEF, and the 
President, implemented key recommendations of the Fuhrman 
Panel. Changes included consolidation of Air Force Program A, 
CIA Program B, and Navy Program C into tlic IMINT and SIGINT 
Directorates. 

(U) This report di.scusses historically significant information in 
the section on authorities and delegations. Additional information 
on the historical development and a bibliography of sources can be 
found in Appendix B and Appendix C. respectively. 

(U) The SECDEF. in concert with the DCI. is responsible for 
the management and operation of the NRO. The SECDEF. with 
the concurrence of the DCI, appoints the DNRO. The DNRO is 
program manager for the NRP and reports directly to the SECDEF. 

(U) The DCI responsibilities include the following: 
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- Approves, in concert with the SECDEF. the NRP budget; 

- Provides security policy guidance for the NRP: and. 

- Guides and participates in the formulation of the NRP 
through the DNRO. 

(U) The NRO organization consists of three line directorates, 
operational offices, and several supporting offices and staffs 
operating under the direction and management of the DNRO. the 
Deputy Director of the NRO, and the Deputy Director for Military 
Suppon. The chart below illustrates the NRO orgimization 
structure. 
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INTRODUCTION^ 


NRO ORGANIZATION 



(U) INSPECTION 
GOAL 


a>) INSPECTION 
OBJECTIVES 


(U) INSPECTION 
METHODOLOGY 


(U) The goal of the joint DoD-ClA inspection was to 
determine the efficiency and effectiveness of the processes and 
mechanisms used to manage and administer NRO resources and 
internal management and administrative programs. The scope of 
the inspection was an organizational management inspection of the 
NRO. Specifically, the inspection objectives were to: 

- Evaluate the adequacy of the authorities and delegations of 
the NRO. the organizations providing suppon. and the 
organizations providing oversight to facilitate mission 
accomplishment. 

- Evaluate the adequacy of the processes and mechanisms 
used to identify mission requirements, and to plan and 
organize resources to meet those requirements: 

- Evaluate the adequacy of the NRO internal administrative 
and suppon programs: and. 

- Evaluate the adequacy of the NRO internal management 
oversight processes and mechanisms. 

) To achieve an independent, comprehensive, and 
objective assessment of the NRO. inspectors received briefings 
from the Deputy Director and senior officials of each functional 
area of the organization on NRO stmeture. policies and 
procedures, and roles and responsibilities. Inspectors sent surveys 
to 1000 NRO personnel on a wide range of issues with 
approximately 650 being returned. Numerous personnel requested 
interviews or made additional comments on the survey forms. 
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ISTRODUCTIOS 


Inspectors collected and reviewed documcnialion covering all 
functional areas and compared the guiding directives to NRO 
policies and procedures as well as to what they sasv being done. 
Further, inspectors conducted interviews at all levels of the 
organization to gain an appreciation for the perspective of the 
personnel, the tasks they pert'orm. and the guidance they use. 
Inspectors compared interview results with the documented 
sources of policy and procedure. 

This inspection was initially intended to include 
portions on budget ajid financial management. Because the 
Congressionally mandated audit report of the forward funding 
issue will include these topics, we will not address them in this 
report. 
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GENERAL ASSESSMENT 


GENERAL ASSESSMENT (U) 


(l) SYNOPSIS 


(U) SYSTEMS 

DEVELOPMENT 

OVERSIGHT 


(D) PRIMARY 
CHALLENGE 


(1) CHARTER 
AMBIGL’ITIES & 
IMPACT 


(U) If a single phrase could capture the ethos of the NRO as we 
found it. it would be; “It’s the mission that's important.*' It is a 
tribute to the dedication and skills of the employees of the NRO 
that they continue to focus on the development and operation of 
satellite reconnaissance systems collecting data of critical 
imponance to the country’s leadership while major changes in the 
nation's intelligence priorities arc taking place. The NRO. no 
longer an organization whose existence is classified, has 
maTntaincd its mission. 

Management oversight of satellite development and 
operations processes represent the strengths of the NRO. The 
NRO management maintains control processes and mechanisms 
directed at assuring collection systems arc designed and built to 
meet intelligence requirements. These complex and interrelated 
processes include oversight by senior management of systems 
design, documentation, scheduling, contractors' achievements, and 
component interfaces. 

The NRO's continued mission focus is admirable in 
light of its own ongoing transition since 1992. from a federation of 
geographically separated, sometimes competing, program offices - 
each with a distinct culture and way of doing business - to an 
organization which has consolidated programs, a more cohesive 
work force, and a central headquaners facility. 

One challenge facing NRO management in a post cold 
war environment involves balancing mission focus with reasonable 
attention to oversight of administrative and support functions. We 
found a lack of appropriate management attention to these latter 
areas. As a result, the NRO is deficient in meeting .standards 
established by the DoD. DCI. or their own NRO directives in: 
property accountability; security policy guidance: manpower 
management: NRO/IG inspection and audit compliance: Equal 
Employment Opportunity (EEO) compliance: and internal 
management control program implementation, 

(TOTO) The team identified ambiguities in the DoD and DCI 
charter documentation defining the authorities of the NRO in the 
areas of procurement and civilian personnel management. We 
could not quantify adverse impact on the effectiveness of the NRO 
in accomplishing its mission in the past due to charter document 
inadequacies. However, a new set of chaner documents that 
clearly and completely defined current responsibilities, 
relationships, and authorities would help resolve transitional 
problems and promote continued cftcctive and efficient mkssion 
accomplishment. 
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GENERAL ASSESSMENT 


(II) WORKFORCE 
ISSliES 


(D) RELATION TO 
NEW 

ORGANIZATIONS 


I 

The NRO munagcmeni maintiiins the goal of 
achieving a cohesive, consolidated work force. The current 
personnel management structure inhibits cohesiveness, and brings 
forth employee"opinions of unfairness in salaries, promotions, 
awards, and assignments. We question whether the NRO goal is 
attainable under current SECDEF and DCI agreements and 
directives which require the NRO to be staffed from the CIA and 
DoD agencies. The attainment of a consolidated, cohesive NRO 
work force would be facilitated by a single civilian personnel 
system, implemented over u period of several years. This would 
require the DNRO to propose changes to the SECDEF and DCI, 

(U) The designers of jointly .staffed DoD/Intclligcncc 
organizations, such as the National Imagery and Mapping Agency 
(NIMA), heed to consider the positive and negative aspects of the 
NRO model in drafting their charter documents. We identified the 
NRO chancr documents, relevant DoD. DCI. and NRO directives, 
and cxpres.scd our view of the resultant organizational procedures, 
especially those related to procurement authorities and personnel 
management practices. Senior DoD and DCI management need to 
be fully aware of the impact on organizations such as NIMA if 
they adopt NRO-like charter documents in whole or in pan. 
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AUTHORITIES A DELEGATIONS 


ISSUES, FINDINGS, AND RECOMMENDATIONS (U) 


(U) In this section, we discuss in dciail the areas requirinj: 
NRO management attention. We highlight superior work as well 
as deficient areas. Our findings relate to four arcus: Authorities 
and Delegations. Rc.sourcc Management. Functional Management, 
and Internal Management Controls. We make recommendations 
which supply one alternative to correct deficient area.s: alternative 
solutions may appropriately correct the situations. 


AUTHORITIES AND DELEGATIONS (U) 


(U) BACKGROUND (U) Authority for the NRO originally came from a September 

1961 letter to the DCl from the Deputy Secretary of Defense 
(DEPSECDEF) confirming his agreement with the Acting 
Director. CIA. to establish the NRO as a joint activity of the DoD 
and CIA. A series of agreements between the DoD and the DCI 
over the next 4 years culminated in the 11 August 1965. 
"Agreement for the Reorganization of the National 
Reconnaissance Program." which "c.stablishjedl the ,\RO as a 
separate operating agency of the DoD... Jointly staffed," The 
SECDEF. with the concurrence of the DCI. appoints the DN'RO; 
the DCI. with the concurrence of the SECDEF. selects the Deputy 
Director. The DNRO miuiages the NRO and executes the NRP. In 
addition to the 1965 agreement. DoD Directive TS-5I<)5.23. (S) 
National Reconnaissance Office, was issued in 1962 and revised 
on 27 March 1964. The Directive established the .NRO as an 
operating agency of the DoD. mandated the conduct of the NRP 
through the use of ".streamlined management procedures." and 
exempted NRP projects from "normal staff review". Neither term 
is further defined. 

(L'l Over the pa.st 30 years, the management oversight .structua' 
for the NRO has undergone numerous changes due to E.\ccutivc 
Orders. Pre.sidcntial Directives. National Security Decision 
Directives, and inputs by the President's Foreign Intelligence 
Advisory Board, us well as the chartering of new boards, review 
groups, and oversight offices. Furthermore, from 1989-1992 the 
NRO itself initiated several significant organizational changes, 
some of which arc still in progress: creation of the Deputy Director 
for Military Support (DD.MST position and the Plans and Analysis 
Office (P&A): consolidation of the three separate programs into a 
functional ("INT") alignment; declassification of the "fact of the 
NRO: and collocation of mo.st elements of the NRO. A more 
detailed di.scu.ssion of the evolution of the NRO's authorities and 
its oversight structure is found in Appendi.\ B. 

We noted that functional areas follow various jwrtions 
of DoD and CIA statutory and regulatory authoritie.s. policies, and 
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procedures. Briefers and those we interviewed found it difficult to 
clearly state what authorities the KRO operated under or why they 
followed either DCI or DoD statutory and regulator> authorities or 
panicular DCI or DoD policies and procedures. Reflecting this 
difficulty in identifying specific authorities and responsibilities, the 
Acting Deputy Assistant Secretars’ of Defense (Intelligence & 
Security) raised several Management Inspection Items for our 
assessment: the NRO's compliance with existing DoD directives 
and regulations: the ambiguity of the oversight and reponing 
relationship; and the differentiation between SECDEF and DCI 
policies with regard to the NRO. 


( FOLIO ) ISSUE: The authorities and delegations for the NRO, the organizations 
providing support, and the organizations providing oversight do not efficiently and 
effectively facilitate mission accomplishment. 


(11) GENERAL ^tdUd) Both of the chaner documents, the 1965 SECDEF- 

ASSESSMENT DCI Memorandum of Agreement (MOA) and the 1964 DoD 

Directive (DoDD). are now more than ?0 years old. The mission 
of the NRO--taking .satellite systems from cradle to grave using 
streamlined management—remains unchanged. but the 
environment in which the NRO operates today is"far different than 
the "world" of its original designers. The organization, 
management, and funding of the Intelligence Comrnunity has 
changed. The Intelligence Community and the DoD have 
.significantly revised their methods of programming and budgeting. 
The NRO is becoming a consolidated, unitary organization rather 
than a headquarters directing three separate components with their 
own supporting infrastructure. 


FINDING: The NRO charier documents are outdated, ambiguous, and 
incomplete. 

(1) CH.ARTER The chaner documents arc written in such vague and 

\VE.AKNESSES general terms that the NRO’s responsibilities, its relationships with 

those providing oversight and support, and its administrative 
authorities are .subject to vaiied interpretations. After 3(t years of 
change, the documents contain obsolete or ambiguous provisions 
that conflict with other authorities and are inconsistent with current 
policies and procedures. The documents arc also incomplete. The 
1965 MOA constitutes the only existing DCI guidance related to 
the NRO. There is no DCI Directive (DCID) or CIA Headquarters 
Regulation comparable to the DoDD that addresses the NRO’s 
status and responsibilities within the Intelligence Community, its 
use of CIA authorities, or its relationship with the CIA. 
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For those reasons, the charter documents do not 
clearly, completely, and accurately describe the existing 
responsibilities, relationships, and authorities of the NRO and 
those providing the NRO with oversight or support. There are five 
.specific weak ^inis in the documents: SECDEF. DCI. luid D.NRO 
responsibilities: the DNRO's chain of command: the .NRO's 
external oversight structure; the NRO’s organizational status: and 
the DNRO's administrative authorities. 

(+!©%)©) The documents do not adctjuatcly define tlie 
rcsponsibilitic.s of the SECDEF. DCI or DNRO. 

- The SECDEF and DCI responsibilities specified in the 
MOA arc no longer consistent with those currentlv defined 
by 50 U.S.C. 403-3. 403-5. 403-6: Executive Order 12333: 
and SECDEF-DCl procedural agreements. For example, 
the SECDEF no longer ha.s "final power" to approve the 
NRP budget as the MOA states, and the DC! has NRP 
reprogramming authority that is not addres.scd in the MOA. 

- The DoDD makes no mention of the DCI’s responsibilities 
regarding the NRP or the NRO. nor docs it mention the 
DNRO's responsibilities to the Intelligence Community 
outside of the DoD. 

- The DoDD has never been revised to address the DNRO's 
responsibilities to develop and implement the Defense 
Reconnaissance Support Program (now the Defense Space 
Reconnaissance Program) as the DNRO was directed to do 
in a September 19K0 DEPSECDEF memorandum assigning 
those respon.sibilities. The DNRO docs not have 
responsibility for "air vehicle overflight projects." as the 
directive states: that responsibility wiLs transferred to the 
Director. Defense Airborne Reconnaissance Office, in 
November 1993. 

(ROUO) The charter documents do not adequately define the 
D.NRO's chain of command. A February 1994 DNRO 
memorandum states that the DN'RO reports directiv to both the 
SECDEF and DCI. The MOA says the SECDEF will choose a 
DNRO who will report to him and be responsive to his 
instructions, but it makes no mention of the DN'RO reponing to the 
DCI. The DoDD is .silent on the DNRO's chain of comnnmd. 
leaving the DNRO’s precise relationship to the SECDEF-or the 
DCI-unclcar. 


By contrast, the charter directives of the other 
intelligence-related Defen.se agencies specifically define their 
director's chain of command. The National Security Agency 
(NSA) and Defense Intelligence Agency (DIA)directivcs-issucd a 
few years prior to the NRO dircctive-.state specifically that their 
directors report directly to the SECDEF. The Central Imagery 
Office (CIO) charter directive-issued in 1993-givcs "overall 
.supervision" of the CIO to the Assistant Secretary of Defense 
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(Command. Control. Communications and Intelligence) 
(ASD|C311): that chain of command follows 10 U.S.C. I92ui). 
which .says the SECDEF will assign "overall supers’ision" of 
Defense agencies to an Office of the Secretary of Defense (OSD) 
official or to the Chairman of the Joint Chiefs of Staff, exempting 
only DIA and NSA. The charter directives of all three agcncics-- 
NSA. DIA and ClO-also contain provisions that define their 
director’s relationship with the DCI. 

(LI) Oversight The charter documents do not adequately define the 

Structure relationships between the NRO and the present external oversight 

structure. Oversight of the NRP and NRO activities by senior 
executives of the DoD and Intelligence Community is an urea of 
uncertainty. Neither of the oversight mechanisms provided for in 
the charter documents has existed for several years. 

(•POWO) The MOA established an NRP Executive Conmiittcc- 
thc DEPSECDEF. DCI. and Special Assistant to the President for 
Science and Technology—"to guide and participate in the 
formulation of the NRP through the DNRO." However, that 
committee was eliminated by Executive Order 11905 in 1976. No 
comparable mechanism has ever replaced the NRP Executive 
Committee, although President Reagan did direct in a 19K5 
memorandum that the SECDEF. DCI. and his Assi.stani for 
National Security Affairs "periodically review the program, 
priorities and resources of the NRO." 

( ROMQ ) The DoDD originally directed that the DNRO. "Keep 
the Director of Defense Research and Engineering and the 
Assistant Secretary of Defense (Comptroller) personally informed 
on a regular basis ...." That provision was replaced in an October 
1979 SECDEF interim change memorandum which established a 
three-member Dcfcn.se Space Operations Committee as "the 
principal advisory body to the Secretary of Dcfcn.se for the (S) 
NRP." The change was never formally made to the DoDD. and the 
change mcmorujidum was cancelled by DoDD 35(X).l. Defense 
Space Council (DSC), in December 19SH, That directive 
established the Defense Space Council, which replaced the 
Defense Space Operations Committee. The Dcfcn.se Space 
Council, a large coordinating entity for all DoD space matters, is 
now moribund". 

(P©fci©) While the oversight mechanisms in the charter 
documents have disappeared, the SECDEF and DCI have created 
several others that presently provide .some form of oversight over 
the -NRP and NRO activities. Those mechanisms include the 
National Reconnaissance Review Board, the Intelligence Program 
Review Group, the Joint Space Management Board." the 
Intelligence Community Executive Committee, and the Expanded 
Defense Resources Board. The relationship of the NRO with those 
oversight mechanisms is not defined by the chancr documents. 

(P©y©') Day-to-day oversight of the NRO by the OSD staff is 
another area of uncertainty. The DoDD states that NRO "projects 
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will not be subject to normal Depanment of Defense staff review." 
That provision conflicts with the Under Secretary of Defense 
(USD) (Comptroller) and the ASD(C3I) chancr directives. The 
Comptroller directive authorizes the Comptroller to "provide fiscal 

management for... national reconnai.ssancc activities_" while 

the ASD(C31) directive authorizes the ASD(C3I) to exercise 
"direction, authority and control" over the NRO's Defense Support 
Program Office and ".staff supervision" over "the Air Force and 
Navy Special Intelligence Programs." an unclassified reference to 
what were then the two .separate DoD components of the NRO. 
The exception from normal staff review also conflicts with a 
March 1995 DEPSECDEF memorandum that makes the newly 
created Deputy Undersecretary of Defense for Space 
(DUSD[Spaccl) responsible for oversight of space acquisition 
programs, 

) In addition, the exception from normal staff review in 
the DoDD is not consistent with recent SECDEF and DCl 
decisions on the NRO. In October 1995. they told Congress that 
they intended to put increased emphasis on Joint oversight of the 
NRO. creating a program analysis and evaluation capability in the 
Community Management Staff and a functional review capability 
in the DoD. Program Budget Decision Number 701 in November 
1995 put NRO funding under the review of the DUSD(Spacc). 
The NRO was also directed to participate in the USD(Comptroller) 
Fiscal Year 1997 budgetary review process in the same manner as 
other intelligence-related Defense agencies. Those actions indicate 
that the NRP and NRO activities may now be subject to the normal 
DoD staff review. 

The charter documents do not adequately define the 
organizational status of the NRO. making it difficult to determine 
the NRO’s relationships with organizations that provide either 
oversight or support. The MOA states that the NRO will be 
"jointly staffed... from the CIA. the three military departments 
and other Government agencies." Elsewhere, the MOA implies 
that the NRO will have separate CIA and DoD components and 
u.se the authorities of the CIA and DoD. but docs not clearly 
describe the nature of the NRO organization or the m<umer in 
which the dual authorities will be u.scd. There is no DCID or CIA 
Hcadquaners Regulation on the NRO that amplifies the MOA. 

The DoDD treats the NRO strictly as a Defense 
agency. It makes no mention of joint staffing of the NRO and does 
not acknowledge any authority for the NRO to use CIA policies 
and procedures in lieu of DoD directives. 

The DoDD does not adequately define the DNRO's 
administrative authorities. There are no delegations of 
administrative authorities as .such in the DoDD. which states only 
that the DNRO is "specifically delegated the authority to: 1. 
organize, staff and supervise the (S) National Reconnaissance 
Office. 2.. Establi.sh. manage and conduct the (TS) National 
Reconnaissance Program...." Although the DNRO may legally 
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infer ailminisiruiivc authorities similar to those given to other 
Defense agency directors from that provision, the DoDD does not 
follow the precedent of other Defense agency chaner directives. 
While the DNRO's delegations are implicit, the charter directives 
of other Dcfen.sc agencies give the director OKplicit delegations of 
administrative authorities. The result is ambiguity for the NRO 
and the organizations providing oversight or support. Neither can 
be certain "of the nature and extent of the DNRO's administrative 
authorities, leaving them open to interpretation or dispute. For 
example, the Director. Human Resources Management Group 
(HRMG). told us the DNRO does not have "appointment" 
authority for civilian personnel, while the NRO Office of General 
Counsel indicated the DNRO did have such authority. 
Funhermore. the CIA Office of General Coun.sel indicated because 
the NRO docs not actually admini.stcr personnel, and has chosen 
not to hire a permanent cadre which would require it to do so. the 
.NRO has no legal need to exercise any personnel authority. 

The weaknesses in the charter documents enumerated 
above affect the NRO and the organizations providing oversight or 
.support in different way.s. From Ihc NRO perspective^ many of the 
weaknesses in the charter documents arc actually strengths. Their 
ambiguity increases the NRO's flexibility andcnhancc.s its fmedom 
of action. The conflicting and inconsi.stcnt provisions permit the 
NRO to maintain distance from what it considers "Office of the 
Secretary of Defense staff bureaucracy." Most imponant for the 
NRO. the charter documents, despite their obsolescence, .still 
support the NRO's "core values;" streamlined management 
procedures and management of systems from cradle to grave. 
However, the NRO uses ihe generality of the documents as 
justification for exercising extensive authority, not specified in any 
particular document or delegation. 

Although the list of weaknesses in the charter 
documents is long, the NRO has accomplished its mission under 
the documents. We could not quantify any mission shortfalls 
directly attributable to the weaknesses noted above. In the past, 
the NRO ha.s operated largely in isolation from the rest of the 
Defense and Intelligence communities. Now. it is moving closer 
to the mainstream of both communities. The NRO Is taking a more 
proactive stance in educating and meeting the needs v>f DoD 
customers. We arc concerned, however, that the charter 
weaknesses will have an adverse impact on mission 
accomplishment in the future. 

(U) The level of external oversight is increasing rapidly. Three 
• OSD staff officcs-'USDtComptrollcr). DASDiIntclligonce & 
Security), and DUSD(Spacc)--now have oversight responsibilities 
for the NRP and various aspects of NRO activities. The OSD staff 
and Community Management Staff are planning new program 
evaluation capabilities. Congress insists on expanded executive 
and congressional oversight of the NRP. The effort to integrate 
military and intelligence space activities will impose new limits on 
the NRO's tlcxibilily and freedom of action. 


(E) IMPACT OF 

CHARTER 

WEAKNESSES 

(II) Effects On the 
NRO 
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(U) The present charter documents leave the NRO vulnerable. 
Actions to move the NRO closer to the mainstream, could affect 
the NRO’s core values. Wc concluded new charter documents 
would presers’C the "core values" and limit the burdens of 
additional oversight. 

Wc are also concerned the growing gap between the 
organization for which the charter documents were designed and 
the organization which exists today will eventually have an 
adverse impact on the NRO's mission accomplishment. The 
charter documents were designed for a covert organization with a 
small "joint" staff and three separate components, each with its 
own infrastructure, policies, and procedures. Today, the NRO is 
an overt organization with a unitary structure struggling to merge 
the three .separate infrastructures of the past into a single system. 
As a CIA Directorate of Science and Technology official told us. 
'The NRO is caught on its way to being something Idiffercntj." 
Our findings in areas such us contract and civilian personnel 
management, manpower requirements determination and equal 
employment opportunity-di.scusscd later in this repon--illu.stratc 
the ditTiculties being encountered in the transition process. A new 
set of charter documents that clearly and completely defined 
current responsibilities, relation.ships. and authorities would help 
resolve transitional problems and promote continued effective and 
efficient mission accomplishment. 

Our interviews with .senior officials in organizations 
providing oversight or support to the NRO indicate that the charter 
wcaknc.s.scs arc adversely affecting their relationship with the NRO 
and hampering their mi.ssion accomplishment. The Acting 
DASD(Intelligence & Security)’ and DUSD(Spucc) believe that 
their charter documents give them oversight rc.sponsibility for the 
NRO. Officials in both offices cited several examples of the 
NRO's lack of rc.sponsivencss. or resistance, to what they regarded 
as legitimate oversight efforts. The Acting DASDdnteiligcnce & 
Security) and the DUSD(Spacc), as well as Community 
Management Staff and Directorate of Science and Technology 
officials, expressed the need for .some level of external oversight Vf 
the NRP and NRO activities. 

The Acting DASDflntelligcnce & Security). 
DUSDtSpace). Executive Director for Intelligence Community 
Affairs and Directorate of Science and Technology officials 
advocated a new set of charter documents for the NRO to clarify 
responsibilities, relationships, and authorities. As one senior 
official stated, there is a need to institutionalize the recent changes 
in the NRO's oversight .structure. At the same time, all expressed 
concern that the "unique capabilitie.s" of the organization be 
preserved. A new set of charter documents would facilitate 
mission accomplishment by the organizations providing oversight 
or support to the NRO. as well as by the NRO itself. 
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(P©^!^) RECOMMENDATION I (DRAFT): The DNRO dral't and submit to the SECDEF and 
the DCI a new MOA that will serve as the terms of reference for a revised DoDD and a new 
DCID to charter the NRO. The MOA should address: 

- The division of responsibilities between the SECDEF and DCI for the NRP and NHO 
activities; 

- The nature of the DoD and CIA contributions to the NHO and the use of each acency's 
authorities by the NRO; 

- The DNRO's chain of command and the degree of external oversight that the NRO 
will be subject to: 

- The applicability of DoD and CIA policies and procedures to the NRO: and 

- The need for a single civilian personnel system in the NRO. implemented over a 
period of several years. 


DNRO COMMENTS: 

Afana^^ement concurs. The NRO will draft a new MOA for SECDEF and DCI 
signatures, and a DCI Directive, respectively. Given the numerous unresolved legislative 
packages and other Intelligence Community reform initiatives, a logical time to begin the 
drafting process is January 199"^. Target completion date is September 199"^. 


(fimOt COMMENTS OF THE DIRECTOR, ADMINISTRATION AND MANAGEMENT. 
OFFICE OF THE SECRETARY OF DEFENSE (DA&MlOSD)); 

Concur, with the recommendation that Recommendation I be revised to accommodate 
the following comments, 

• The NRO was and remains established as a separate operating agency within the 
Department of Defense. Accordingly, given the provisions of 10 U.S.C., there is no 
ambiguity about the fact that the Director NRO carries out his mission under the 
authority, direction, and control of the Secretary of Defense (SECDEF). However, the 
Director NRO also is subject to the policies and priorities of the Director of Central 
Intelligence (DCI) in matters involving national foreign intelligence. This 
fundamental division of responsibilities between the SECDEF and the DCI is ba.sed on 
statutory and Executive Order authorities, and is not subject to modification through 
any MOA as suggested in Recommendation I. Accordingly, the u.%e of such concepts 
as "dual chains of command," "joint endeavor." or "joint roles," as they are discus.sed 
in your report arc misleading, and they are not appropriate .subjects for negotiation or 
inclusion in a MOA. MOAs would be appropriate for details of implementation, such 
as .staffing, procedural matters, .support arrangements, exceptions to policy, etc, 

- The DoD Charter Directive is ha.sed only on relevant e.xisting statutes and 
E.xecutive Orders and would not normally contain time .sensitive implementation 
details. Accordingly, the MOA is not a prerequisite for developing the revised DoD 
Charter Directive. 
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- The implication that a DC! Directive is ne'cessary to charter the NRO is incorrect. 
The DoD Charter Directive must he the establishing document if the NRO continues 
as a DoD agency. A DC! Directive, however, would he a useful device for providing 
relevant national foreign intelligence policy, program, and prioritization guidance for 
the Director NRO. 

- The requirement for a separate civilian personnel system for the NRO would he 
linked to SECDEFIDCI agreements an stuffing. This subject iraj a major issue in the 
Department's recent e.xperienec with the NIMA legislative package, and should 
provide .significant insights for determining alternatives for the NRO case. 

- While the Director NRO must he a major player in the development of any MO A 
involving the NRO, the immediate staffs of the two principals (SECDEFIDCI i must 
have primary responsibility for their preparation. The extent of the Director .\'RO's 
involvement in the preparation of a DCl Directive is a matter for the DCI to decide. 


(rom) COMMENTS OF THE DEPUTY UNDERSECRETARY OF DEFENSE FOR SPACE; 
Concur with the report findings and recommendations. 


COMMENTS OF THE ASSISTANT SECRETARY OF DEFENSE (COMMAND. 
CONTROL. COMMUNICATIONS AND INTELLIGENCE): 

Concur with the comments ofDA&M(OSD). 


(fiSm) EVALUATION OF MANGEMENT COMMENTS: 

( FOU& ) We concur with DNRO's proposed action.^. We believe the.se actions .should 
be targeted for completion by I June 1997 vice the proposed date of September 1997. 

(F^^t^) VVe concur with the comments provided by the DA&M(OSD) and have 
revised Recommendation I accordingly as follows: 


< rOl ' > «) RECOMMENDATION 1 (REVISED): The DNRO draft and submit (o the 
SECDEF and the DCI a new MOA (hat will serve as the terms of reference for a revised 
DoDD to charter the NRO and a new DCID. The draft MOA to be completed no later 
than I June 1997, The MOA should address: 

- Clarification of responsibilities between the SECDEF and DCI for the NRP and 
NRO activities: 

• The nature of the DoD and CIA contributions to the NRO and the use of each 
agency's authorities by the NRO; 

• The DNRO's chain of command and the degree of external oversight that the 
NRO will be subject to: 
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• The applicability oFDoD and CIA policies and procedures to the NRO: and 

• The need for a single civilian personnel system in the NRO, implemented over a 
period of several years. 


(TOUQ ) RECOMMENDATION 2 (DRAFT): The Director of Administration and Manueemont. 
Office of the Secretary of Defense, revise DoDD TS-5105.23. based on the approved MOA. and 
revise the chancr directives of OSD oversight offices as necessary to agree with it. The revised 
DoDD should: 

- Delineate the division of responsibilities between the SECDEF and DCI reuarding the 
NRO and NRP: 

- Describe the characteristics of the joint endeavor between the DoD and CIA: 

- Clearly define the DNRO's chain of command and the relationship between NRO and 
the organizations in the OSD having oversight responsibility for the NRO; 

- Specify, and differentiate between, the responsibilities of the DNRO as the DNRO and 
as the Program Manager of the NRP and the Defense Space Reconnaissance Program: 

- Include a delegation of administrative authorities similar to the delegations given to 
other Defense agencies: and 

- Address the applicability of DoD directives, instructions and other issuances to the 
.NRO. .stating that the NRO must comply with all DoD directives or that NRO will 
comply wiih^only selected DoD directives. If the latter, include a process to identify 
which DoD directives apply to the NRO and which do not. 


DNRO COMMENTS: 

DNRO concurs. Director of Administration and Management, Office of Secretary of 
Defense, is tasked to revise appropriate DoD directives based on the new MOA. NRO will 
provide inputs as needed. Target completion date is I September 1997. 


COMMENTS OF THE DIRECTOR. ADMINISTRATION AND MANAGEMENT. 
OFFICE OF THE SECRETARY OF DEFENSE: 

Concur. The revised DoD Charter Directive would be prepared by my office, pursuant 
to responsibilities and functions assigned to the Director of Administration and Management by 
the Secretary of Defense, and in coordination with cognizant DoD officials and the DCI. The 
Directive would clearly state the NRO’s mission, responsibilities, functions, relationships, 
authorities, and any delegated administrative authorities, based on relevant existing statutes and 
Executive Orders, and DoD organizational and management imperative. 

iPOVO) Should the Secretary of Defense consider it appropriate to designate the NRO as a 
Combat Support Agency pursuant to Section I9J, 10 U.S.C., as was proposed for the NIMA. then 
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the Chuirman of the Joint Chiefs of Stuff would have a statutory oversight role pertuininji to the 
S'RO's readiness to support the operational forces. 


l F&V\D ) EVALUATION OF DNRO AND DAAM(OSD) COMMENTS; 

V/c consider the proposed actions of the DNRO to he re.\'ponsive to the 
Recommendation. 

We concur with the comments of the DA&MtOSD) on this Recommendation and on 
Recommendation I and revise Recommendation 2 accordinftly as follows: 


(TOUO ) RECOMMENDATION 2 (REVISED): The Director of Administration and 
Management, Office of the Secretary of Defense, revise DoDD TS-5105.23 and revise the 
charter directives of OSD oversight offices as necessary. Target date for completion is I 
September 1997. The revised DoDDs should: 

- Clarify the responsibilities betvreen the SECDEF and DCI regarding the NRO 
and NRP; 

- Describe the relationships and authorities of the DoD and CIA regarding the 
NRO; 

• Cleariy define the DNHO's chain of command and the relationship between NRO 
and the organizations in the OSD having oversight responsibility for the NRO: 

- Specifi', and differentiate between, the responsibilities of the DNRO as the D.NRO 
and as the Program Manager of the NRP and the Defense Space Reconnaissance 
Program: 

- include a delegation of administrative authorities similar to the delegations given 
to other Defense agencies; and 

- Address the applicability of DoD directives, instructions and other issuances to 
the NRO, stating that the NRO must comply with all DoD directives or that NRO 
will comply with only selected DoD directives. If the latter, include a process to 
identify which DoD directives apply to the NRO and which do not. 


(rOl'Qi) RECOMMENDATION 3 (DRAFT): Based on the approved MOA. the DNRO draft 
and submit to the DCI a DCID on the NRO to parallel the revised DoDD. The draft DCID 
should; 


- Delineate the division of responsibilities between the SECDEF and DCI regarding the 
NRO and NRP and the DNRO's relationship to both officials; 

- Describe the characteristics of the joint endeavor between the DoD and CIA; 
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- Disaiss the DNRO's responsibilities as the Program Manager of the NRP and the 
relationship between the NRO and the Community Management Staff and non-DoD 
Intelligence Community members: and 

- Define the CIA's responsibilities regarding the provision of manpower, security policy 
guidance, personnel management, financial management, and other intra.structure 
support to the NRO. 


(TOfM) ) DNRO COMMENTS: 

( POUO) Management concurs. NRO will draft a DCl Directive on the NRO. 


(rCUG) COMMENTS OF THE DIRECTOR, ADMINISTRATION AND MANAGEMENT. 

OFFICE OF THE SECRETARY OF DEFENSE: 

The intent of this recommendation is not clear. As we noted earlier, a dual charter 
concept has no legitimacy. The role of the DoD Charter Directive is to establish the NRO as a 
DoD agency. The role for a DCI Directive is to provide appropriate national foreign 
intelligence policy, program, and prioritization guidance for the Director NRO. Both are 
essential, bur their purposes must be clearly understood and remain mutually exclusive. 


(Femi EVALUATION OF DNRO AND DA&M(OSD) COMMENTS: 

(FOUQ) We consider the proposed actions of the DNRO to he responsive to the 
Recommendation, 

iFOUO) We concur with the comments of the DA&M(OSD) and revise Recommendation 3 
accordingly as follows: 


( POUO) RECOMMENDATION 3 (REVISED): The DNRO draft and submit to the DCl a 
DCED on the NRO to parallel the revised DoDD. The draft DCID to be completed no later 
than 1 September 1997. The draft DCID should: 

- Clarify the responsibilities between the SECDEF and DCI regarding the NRO 
and NRP and the DNRO's relationship to both officials; 


- Describe the relationship and authorities between the DoD and CIA regarding 
the NRO; 

- Discuss the DNRO's responsibilities as the Program Manager of the NRP and the 
relationship between the NRO and the Community Management Staff and non- 
DoD Intelligence Community members; and 
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|(bM:>) 10 use' 424 


(D) NRO 

CONTRACTING 

MANAGEMENT 


(■POW) Contracting is the one functional urea in which we 
found transition problems related to authorities and deloautions. 


m(3) 10 use 424 


^ We found no indication that the DNRO exercised his 
contracting authority from the SECDEF as a Defense agency 
director. 


(P©«0) FINDING: The current and planned NRO contracting management systems 
include procedures which conflict with the legal constraints of the CIA Act of 1949. 



) 10 VSi 424 

|(h)(:.) 10 use’424 
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AUTHORITIES & DELEGATIONS 



(b)(3) louse 424 

■ ■ 

1 1 

■ ■ ■ ■ ■ 




(U) LIMITS ON 
DELEGATION OF CIA 
CONTRACTING 
AUTHORITY 





(U) COMPARISON OF 
CIA ANDDOD 
AUTHORITIES 


(TOU e) The NRO could achieve an efficient and effective 
unitary contracting system based only on one set of authorities. 


(b)(3) 10 use 424 
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AUTHORITIES A DELEGATIONS 


(li)(:>> 10 use 424 


(b)(3) 10 use 424 



hisioncal documents wc reviewed, we found no indication that use 
of those DoD authoritie,s had impeded the NRO's use of 
strcamlined management or slowed acquisition of a desired 
capability. 



(b)(:>) 10 l:S(;424 
{h)(3) louse 424 


(b)(3) 10 use 424 


I The deviations of impommcc to 
the NRO arc all related to the full and open competition 
requirements of 41 U.S.C. 253. Similar authority for deviations 
from 41 U.S.C. 253 is given to DoD in 10 U.S.C. 2304(c)(6). 
which limits competition when disclosure of needs would 
compromise national security. 



( FOLIO ) RECO.MMENDATION 4: The DNRO prepare a decision memorandum and 


sul 


lit it to the SECDEF and PCI 1 

Tb)(3) 10 use 424 _I 

L 
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(mrii DS’RO COMMENTS: 



EVALUATION OF DNRO COMMENTS: 


■■■■■■(bH.') 10 use 424 

mhtwiwMwMl 

Ei)(3) 10 IISC424 


( FOHO i Since the NRO urn estahlished ax a Defense Agency, we requestci! an assessment oj the 
ileleaation of DC! contracting, authority to personnel working at the NRO hy the DoD Office of 
General Counsel. The DoD Office of General Counsel will provide a response by I October 
1996, at which time the DoDIIG and Cl AUG will assess the DoDIOGC and CIAIOGC positions 
and determine if the i.mie rapdres further action. 
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MiSSlO.S' REQVIREMESTS 


(U) MISSION REQUIREMENTS DETERMINATION 


(tUUO) OVERALL ISSUE: The NRO has adequate processes in place to determine and 
prioritize mission requirements. However, the NRO does not adequately assign 
responsibilities among its components for: coordinating requirements for new satellite 
systems, and dealing with the near-term needs of primarily military users of operational 
prc^uct. Moreover, NRO does not adequately coordinate with other DoD organizations 
in supporting military commanders with NRO products. 


(U) FUTURE ( POUO ) There is no simple way to describe the current 

SATELLITE processes which drive future reconnaissance satellite capabilities. 

SYSTEMS That is the consensus among senior NRO officials and officials 

from agencies which work closely with the NRO. Guidance to the 
(U) Background NRO on future satellite system needs results from an interactive, 

evolving process involving many officials and technical managers 
from throughout the intelligence, defense, and policy communities. 
Typically, as the Plans and Analysis Office (P&A). one of the 
principal customer interface offices, becomes aware ot major 
concerns from military, intelligence, or policy leaders about 
intelligence collection needs, it becomes involved in an c.Mcn.sivc 
scries of discussions, task forces, study groups, etc., over a period 
of years to help define what new capability is needed and projected 
costs. Other NRO directorates and offices often contribute to the 
process. 

In the past there wem more established means for the 
Intelligence Community to provide the NRO with coordinated and 
prioritized guidance on future sutcilitc reconnaissance systems. 
The SIGINT Overhead Requirements Subcommittee of the 
National SIGINT Committee had provided NRO with 
requirements on overhead SIGINT collection needs for twenty 
eight years, and the CIO and its prcdcccs.sors provided guidance on 
IMINT collection needs for a comparable period. These 
organizations continue to provide guidance: however, they are one 
"voice” among many. 

The NRO’s efforts to expand and strengthen the 
support provided to military customers and user, through new 
reconnaissance satellite capabilities is in its initial stages. These 
efforts have already produced positive results. (Note: Customers 
arc government organizations that directly provide the NRO with 
collection requirements, help fund NRO projects, or validate 
collection requirements. Users arc organizations that make 
substantial use of NRO products.) DoD components which have 
been providing requirements guidance to NRO include: the Joint 
Requirements Oversight Council: the DIA: the .Military 
Intelligence Board: and the Unified Commands. They have 
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MISSION REQUIREMENTS 

provided useful guidance in recent years, supported by the ettons 
of the Defense Support Project OfTice (DSPO) which, along with 
P&A. have worked with them to translate their guidance into 
documentation for defining a satellite reconnaissance capability. 
Tlie NRO has recently been praised by the Commander in Chief 
U.S. Pacific Command, for taking the first steps to fully engage 
theater warfighters in the design of NRO architectures. 


(FOliO) ISSUE: The NRO has an adequate process for responding to coordinated, 
prioritized, customer needs for future satellite systems; however, the NRO should 
implement formal procedures for informing customers in a timely manner of proposed 
design modifications to future satellite systems. 


(Li) Responding To 
Customer Needs For 
Future Satellite 
Systems 


(TOUQ i ) The NRO has formal, sinicturcd processes for 
acceptance of requirements for new satellite collection systems. 
These procc.sscs. known as the acquisition decision approach, arc 
documented in NRO Directive 7, They arc generally working well 
ba.scd on evidence compiled from interviews with NRO technical 
managers and customer officials, and from examination of NRO 
requirements documents. The processes include, among other 
things, the procedures for assessing technical risks, costs for each 
sy.stcm option, estimates of time to develop and acquire the 
collection .system, and continuous assurances that customer 
requirements remain current and valid. 


In the acquisition decision approach, the DNRO is the 
acquisition decision authority at each key decision point and is 
advi.scd by the NRO Acquisition Board, chaired by the DNRO. 
The members arc: the Deputy DNRO. the DDMS. the program 
directors, and the Director of P&A. The key decision points in the 
NRO acquisition decision approach arc as follows: funded concept 
definition studies approval: pre-acquisition approval; and new 
program start. 


fp©©©) Our recommendation in the Autltorities and 
Delegations .section covering designation of which directives and 
guidance apply to the NRO should result in a decision covering 
application of the DoD or CIA acquisition process to NT^O and the 
roles and responsibilities of DoD and CIA officials. Therefore, we 
do not make separate recommendations here with regard to this 
matter. 


OEQLA) FUNDING: The NRO does not consistently make a timely and concerted effort to 
fully inform customer organizations which exploit NRO collected data of future satellite 
system design changes. 
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The NRO gets mixed reviews in interviews with senior 
personnel in customer organizations and in customer survey data 
concerning responsiveness in meeting their needs. Customers 
contend that NRO has done an excellent job in designing, building, 
and operating satellite reconnaissance systems which have 
continued to collect critical intelligence information. Although 
recently NRO has become much better in dealing with customers, 
they state the NTiO has been somewhat difficult to work with: that 
NRO cmploycc.s would do better to consider the needs of 
customers, be less arrogant, and review major issues with 
customers prior to making a decision which affects all participants. 
NRO cu.stomers claim a lack of timely feedback on .system design 
changes which could result in major cost growth for exploitation 
equipment and serious delivery schedule slippages. The schedule 
slippages and customer dissatisfaction w-ith the development of the 
Requirements Management System and the Enhanced Imaging 
System arc examples of problems caused by. in pan. lack of timely 
feedback to customers on proposed design changes. The NRO 
management has apparently made .some progrcs.s with its 
employees on this i.s.suc as .survey data indicate NRO employees 
overwhelmingly agree that management emphasizes .service to 
customers. This is con.sistcnt with the rcpons from customers that 
NRO is becoming better to deal with in recent years. 

(U) The customer survey data, which reinforces the inicrs'icw 
comments, arc summarized as follows; 




Survev Statement 

Response’* 

Satisfied with the working relationships 
with the NRO. 

yy'r agree 

4(Kf disagree 

Satisfied with the NRO's timely development 
of new collection system.s. 

46^^^ agree 

39^?^ disagree 

Satisfied with access to the NRO if 
questions or problems arise regarding 
requirements. 

.*»2Cr agme 

31 Tr disagree 

Their requirements arc considered by 
the NRO in planning future .sy.stcms. 

69^ f agree 

21 ‘/f disagree 

They were informed in a timely manner when 
alterations to original plans were 
being con.sidcrcd. 

agree 

disagree 

Satisfied the NRO has proccssc.s in place 
to adju.st and update it's plans for 
future systems as priorities change. 

33‘^<- agree 
dS'lf disagree 


* Neutral responses not reflected. 
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RECOMMENDATION 5: The DNRO direct development and implementation of 
formal procedures to inform affected customers of proposed satellite system design 
modiHcations in a timely manner. These actions to be completed by 1 October 1996. 


DNRO COMMENTS: 

Concur. NRO customers currently attend major contractual desiftn reviews and 
participate in numerous assessment capahility exercises and users' conferences worldwide. 
Nevertheless. are mindful of the need to better inform customers of even minor dcsijtn 
chanf’e.s. P&A will work to better use our cxi.stin}( tools and to promote already available 
opportunities by placing the NRO's Intet^rated Road Map on INTELINK in May JW6. Amon<{ 
the NRO's e.xisting tools is the NRO Directive 14, "NRO Customer and User Support," 
Implementation Plan. The DDMS, with as.Kistance from NRO Directorates and Offices, will 
review the Implementation Plan and incorporate appropriate information with regard to 
formalizing the ciwomer notification proce.s‘s by I October 1996. 


(rnWi EVALUATION OF DNRO COMMENTS: 

VV'^’ consider the proposed actions by DNRO to be responsive to the Recommendation. 


ISSl'E: The NRO has an adequate process for upgrading future models of 
currently operational satellite reconnaissance systems to better satisfy' customer 
requirements. 


The process employed by NRO to determine whether 
to expend resources on upgrades of currently opcnitional satellite 
systems is the same as for determining whether to build a new 
satellite. This acquisition decision approach process is described 
in NRO Directive 7. Approval by the DNRO is required before a 
program manager may take any action committing to major 
upgrade. 

( rOUQl There are a number of reasons customers, and 
sometimes NRO program managers, lobby for upgrades of current 
.sy.sicms. The primary reasons include new technologies which 
would provide a significantly enhanced capability, and operational 
data which indicate that the satellite could provide enhanced 
quality or quantity of data with system improvements. 

The NRO made a commitment to a strong technology 
program through assured funding of new concepts and an 
organizational structure for managing technology development. 
The organization sets aside 5 percent of its research and 
procurement budget for new technology development with the 
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Technology Office, the Uirccioraics. and several other offices 
being the major managers for these funds. 

•tSo Customers play an imponant role in assuring that NRO 
technology developments, which could upgrade satellite systems 
of importance to them, arc supported. According to the NRO 
technical managers, customers arc kept apprised of the staui.s of 
the technology projects. Customer support for major upgrades to 
operational systems based on new technologies is .sought by the 
NRO acquisition board as an integral input of the acquisition 
decision approach. 

All technology projects are entered into the technology 
road map. a computeiized graphical data base of all technology 
projects, as .soon as they show promise that they will be important 
to a current upgrade or a future system. As the technology 
progres-scs and & specific satellite program is identified where it 
will be used, .senior management approves its insertion into the 
NRO integrated road map where it becomes part of the formalized 
planning and oversight process. (Refer to the Strategic and Annual 
Planning section for a description of the NRO integrated road 
map.) Technology projects also become .subject to the 
configuration control process which requires prior miinagcmcnt 
approval and documentation of all changes and upgrades to NRO 
systems. 



( FOll ^ ISSUE: The NRO has an adequate process for responding to requests for 
operational tasking of reconnaissance systems. 



(b)(1)(c) (b)(3) 10 use 424 

■ 


The NRO lias a 


participant (not a member) on the working group 


(b)(1)(c) (b)(3) 10 use 424 
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(rOH(») ISSUE: The NRO does not have an adequate delineation of responsibilities 
anion)> its components for coordinating either long-term requirements for new satellite 
systems or for dealing with the near-term needs of (primarily) military users of 
operational products. 


(li) Coordinating 
Long-term 
Customer 
Requirements 


(COW©) The NRO Directives 7 and 14. issued in January 199? 
and June 1995 respectively, arc the principal documents which 
define component responsibilities for interfacing with customers 
and users on their requirements for new satellite collection 
capabilities. Prior to the issuance of NRO Directive 14, the P&A 
was primarily responsible for working with the diverse Intelligence 
and Policy Community customer base and supporting them in 
crafting intelligence requirements for the NRO. The DDMS was 
responsible for working with the defense intelligence community. 

trOUQ ) The P&A Office keeps abreast of the long-term trends 
in collection requirements, such as found in the .National 
Intelligence Needs Process, particularly as they relate to satellite 


2K 


OECHIjT dvem.^m taleut iudviiole 


















OCORI!T » D¥EMAW » TALEP<T KEI'llOBE 


A/;S570A' REQUIRESfESTS 


collection. They identity tho.se long-term rctiuircTnciits needs 
which could be .satisfied by .satellite collection. The Policy and 
Intellificnce Communities consider P&A their prinian’ entree into 
the .MRO. 

The DDMS a.ssurcs that the needs of the JCS. Unified 
Commands, and the Military Services for new reconnaissance 
.satellite capabilities arc heard at the highest levels of the NRO, 
NRO Directive 7 gives the DDMS this responsibility. Subordinate 
to the DDMS is both the DSPO and the Operational Support Office 
(OSO). DSPO .serves as a staff which suppons the DDMS in 
interactions with various Pentagon staffs. OSO delivers tailored 
support to military operational u.sers of NRO products and 
services. 


FINDING: NRO Directive 14 conflicts with NRO Directive 7 regarding the 
responsibilities of P&A and DDMS for interfacing with customers and users on long-term 
requirements guidance. 


(FOUQ) Prior to the is.suuncc of NRO Directive 14 and the 
Customer Support Implementation Plan, the DDMS and P&A 
divided the tic.sponsibiliiic.s for interacting with the full range of 
customer community organizations and coordinated their activities 
as appropriate. Our interviews with NRO managers and officials 
from customer organizations did not identify any problems relating 
to interactions between P&A or DDMS and customer 
organizations and committees on long-term requirements 
guidance. 

The customer interface responsibilities now fall most 
heavily on the DDMS with the issuance of NRO Directive 14 on 
19 June 1995 and Its accompanying Customer Support 
Implementation Plan, issued on 11 October 1995. NRO Directive 
14 designates the DDMS as "the single manager and Executive 
Agent for all NRO customer and user support'*." According to the 
Customer Suppon Implementation Plan, the "DDMS will use 
information on cu.stomcr rcquircmcnis and satisfaction to help 
determine strategic direction and priorities for customer support." 
P&A rcsponsibiUiics arc now identified as "the NRO authority on 
requirements considered in program decisions for current and 
future NRO sy.sicms." We note NRO Directive 7. which identified 
P&A as the primary responsible component for customer itncttaco 
responsibilities, has not been withdrawn or rewritten. There has 
been no NRO policy statement on the reasons for shifting primary 
responsibility to DDMS for all NRO customer and user support. 

It is our judgment the DDMS will not be fully capable 
of discharging its responsibilities as the Executive Agent for all 
NRO cu.stomcr and user suppon with its current staff. The 
components of the DDMS. DSPO and OSO. do not have the 
personnel with the experience or .skills to fully manage the 
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complex interagency and intercommunity interactions invol\ed in 
long-term requrrements guidance at this time. 


RECOMMENDATION 6: The DNRO issue a directive or letter clarify ing sections 
in Directives 7 and 14 and the Customer Support Implementation Plan relating to 
component responsibilities for managing intelligence collection requirements and for 
providing customer and user support. These actions to be completed by 1 October 1996. 


(P&m) DNRO COMMENTS: 

Concur with caveat. A.s an alternative to Recommendation 6, the DNRO wili direct that 
the NRO Directive 14 Implementation Plan be updated to eliminate duplicative and confmlng 
lanpuaj^e. Target completion of this action is / October J996, 


EVALUATION OF DNRO COMMENTS: 

We accept the proposed DNRO alternative to Recommendation 6. 


(H) Short-term 4ft) The OSO is the NRO component primarily responsible for 

Needs of Primarily interacting with the full complement of military users of data and 

Military Users services from operational satellites. Other elements of the NRO. 

including the Tactical Dissemination Group of the 
Communications Directorate and elements of the SIGINT and 
1 MINT Directorates, interact with military users: however, they arc 
expected to coordinate their efforts through OSO. 


^■HpSD - (b)(1) EO 13526 Section 3.3(1) 
pSD - (b)(1) EO 13526 Section 3.3(1) 


J^OSD - (b)(1) EO 13526 Section 3.3(1) 
OSD - (b)(1) EO 13526 Section 3.3(1) 
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OSD - (b)(1) EO 13526 Section 3.3(1) 


Wc found NRO components have not yet been fully 
successful in coordinating among themselves their interactions 
with military users of NRO products. NRO managers and users 
stale there needs to be better coordination between NRO 
components to assure that military commanders in the field do not 
receive conflicting or redundant support. Managers claim that they 
ittc working to solve the problems: however, we found no evidence 
of actions taken. All NRO components responsible for providing 
products and .services to military users should agree upon the terms 
for coordinating their effort.s. 

There are no adequate procedures in place for h^O 
components to .systematically obtain and use feedback from 
military users on the quality, quantity, and timeliness of NRO 
products and services received. Components which interact daily 
with military users receive numerous messages containing useful 
comments and information. No useful database containing 
information from these feedback messages has been created, 
although managers have stated that such efforts arc underway. 
Interviews failed to surface other processes in place for managing 
u.scr feedback or utilizing such information in a systematic manner 
to improve service. NRO components responsible for regularly 
interfacing with military users should implement processes to 
effectively manage information derived from customer feedback. 


(TOUQ) FINDI.NG: Officials in the DIA, NS.A, and CIO contend that the NRO is not 
properly coordinating its efforts to provide NRO products and services to military users 
with their agencies. 


4&4 Managers of DoD agencies which have extensive 
interactions with the NRO contend OSO has been overly 
aggressive in marketing NRO products and services to the military 
commands. In the judgment of the in.spcction team, the Is.suc of 
the extent to which NRO’s direct support to militarv' commands 
infringes upon the responsibilities of other DoD agencies should be 
resolved by all the affected agencies. A senior manager in a 
customer organization stated OSO is trying to expand its charter by 
servicing military commanders with "single solutions". i.c.. data 
from NRO satcllitc.s. without con.sidcring other potential 
intelligence sources and disciplines. Another claimed OSO 
engages in activities, such as helping military commanders in the 
field'directly access NRO collected data, which, he believes, 
the responsibility of the CIO and NSA. A third stated OSO fails to 
coordinate its contacts with the military commands with DIA. 
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OSO managcmcm. aware of ihcsc issues, considers it within the 
responsibilities of the NRO to support the commanders in the field. 


RECOMMENDATION 7: The DNRO direct development, coordination, and 
implementation of a joint plan with appropriate DoD organizations for coordinating 
support to military commanders in the Held. Coordination of the plan to occur no later 
than I November 1996. 


ffWO) DNRO COMMENTS; 

IVe concur with Recommendation The NRO's DBMS will initiate a process to 
develop, coordinate, and implement a joint plan with appropriate DoD orftanizations for 
coordinating support with military commanders in the field. This plan will he ready for 
coordination by 1 November 1996. 


(im^) EVALUATION OF DNRO COMMENTS; 

We consider the proposed actions of the DNRO to he responsive to the 
Recommendation. 
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(U) STRATEGIC AND ANNUAL PLANNING 


(II) BACKGROUND (U) Planning involves establishing objectives and goals as well 

as projecting resources and functional coniponcnis to achieve 
them. Resources include manpower, facilities, ecjiiipment. 
material, and fund.s. Objectives arc the general statements of 
intended accomplishment; goals arc the specific, measurable 
targets. Strategic planning focuses on broad, long-term issues. 
The strategic plan provides the organization a foundation for 
managers at all levels of the organization to set priorities, allocate 
resources, and anticipate and incorporate future requimments. 
Annual planning links longer term objectives with .shorter term 
goals. 

(U) Performance indicators track an organization's status and 
progress regarding objectives and goals, the indicators usually 
take the form of chans which depict progress toward unit and 
organizational objectives and goals. Feedback mechanisms keep 
management, employees, support and oversight personnel 
informed on the progTc.ss achieved. 


(P0TtO) ISSUE: The NKO has adequate processes and mechanisnis to prepare strategic 
and annual plans. However, there is no comprehensive, consistent system for identifying 
performance indicators. 


(IW©)THENRO The NRO Strategic Plan, last published in IW3. 

STR.ATEGIC PLAN documents the DN'RO vision and strategic context, establishes the 

strategy and objectives, and provides approaches to achieving 
near-, mid-, and long-term goals. The strategic plan forms the 
foundation for NRO planning, programming, and budgeting, and is 
available to all NRO employees, current plan resulted from a 
year-long effort to identify and respond to factors reshaping the 
U.S. national security interests and incorporated results from two 
years of internal and external reviews and analyses, including the 
Woolscy and Fuhrman reports. The Plans. Rc.sources and Policy 
Division of the P&A Office maintains responsibility for 
coordinating the strategic planning process. 

(^©♦j^Thc NRO Strategic Plan recognizes the following key 
external inllucnces which will directly impact the organization: 
new threats to U.S. security: U.S. National Security Policy; 
Congressional issues; Intelligence Community issues: support for 
milirary and other overseas operations: and new technology. 

(^iOyO) According to the plan, the macro-.siraiegy "responds 
to current conditions, while enabling transition to longer term 
strategic objectives" to achieve the DNRO vision. The plan further 
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states "the macro-strategy recognizes the conflicting pressures 
among sunk costs, existing infrastructure, current capabilities, 
near-term needs, changing needs, and future investment 
requirements to build and niainiain needed new capability." The 
macro-strategy consists of: 

- Investing in the future while accepting near-term risk: 

- Increasing emphasis on suppon to military operations; 

- Maintaining functionality and flexibility while decreasing 
capacity, until prudent to'decrease capability: 

- Assuring a viablc industrial base: 

- Developing and protecting critical technology: and 

- Improving overhead mission management, exploitation, 
ami dissemination. 

d') LONG RANGE TEOVO) The NRO uses the Integrated Road Map. along with 

AND .ANNUAL the NRO Ma.ster Schedule, as planning tools for both long-range 

PLANNING and annual planning. The Integrated Road Map consists of an 

interactive soft copy document which is u.sed to maintain oversight 
of the schedules and mile.stoncs for the numerous and complex 
systems development and technology programs. The Master 
Schedule provides on-line information on key activities for shorter 
specific periods of lime. 


4GOUU) FINDING: The NRO Strategic Plan is out-of-date. 


The NRO Integrated Road Map should reflect the 
main features of the Strategic Plan. It .serves as the primary tool 
for the scheduling of mile.stoncs in systems development to 
achieve the planned objectives and goals. The Integrated Road 
Map suppons integrated planning across the directorates; 
development of investment strategies: decision-making at all 
levels: and implementation of the NRO Strategic Plan. The 
availability of the Integrated Road Map via the Government Wide 
Area Network makes it an invaluable tool to communicate to all 
employees the current status of all programs and long-term 
direction of the NRO. 

The Integrated Road Map is updated at quancrly 
.senior management meetings with the DNRO approving change.s. 
As directorates and offices review and update their own road maps, 
the NRO Integrated Road Map reflects these changes. The end 
result reflects current program status and relationships between 
programs. 
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The NRO Master Schedule shows NRO milestones in 
4-. 12-. ami 36-month Increments. It includes baseline program 
schedules, launch manitests. congressional briefing visit schedules, 
and other significant activities of senior management. The NRO 
uses it to maintain staff awareness of future activities and potential 
conflicts that may require rc.soluiion. Although operational, the 
format and structure arc still undergoing development. 

.Managers used varying techniques to accomplish 
annual planning. Some u.scd formal monthly planning sessions, 
while others used their office road map. combined with the NRO 
Integrated Road Map. to plan their activities. A minority did not 
use any annual planning mechanisms. 

The long-term nature of development of 
reconnaissance satellites do not require annual review and 
adjustment of .strategic plans; however, the orgaitizational 
infrastructure .supporting the major development programs needs 
updating more frequently than every 3 years. Changes in industry', 
high-technology, customer-supplier relations, arc e.vamples of 
external factors which occur too rapidly to allow a three or more 
year hiatus between strategic planning reviews. 


< POil 0) RECOMMENDATION 8: The DNRO direct development and Implementation of 
a process to update the NRO Strategic Plan annually to ensure it accurately portrays and 
communicates the organization future. Actions to be completed by .30 May 1997. 


( P&V& l DNRO COMMENTS: 

Conci 4 r. The Jeremiah Panel urn created to define the NRO of the 21.it century with 
fhud report due June 1996. This report will impact the NRO Strategic Plan. The DNRO will 
provide a revised Strategic Plan hy 30 May 1997. In conjunction with the May 1997 revised 
Strategic Plan, the NRO will institute a process providing for annual review, and update if 
required, of its Strategic Plan. 


EVALUATION OF DNRO COMMENTS: 

\Vc consider the proposed actions of the DNRO to he responsive to the 
Recommendation. 


(1) PERFORMANCE 
INDICATORS AND 
FEEDBACK TO 
STAFF 


IPWO) Wc found various feedback mechanisms in use by the 
organization. The DNRO uses E-mail, called Director’s Notes, to 
apprise the entire organization of achievements toward corporate 
objectives and goals as well as .significant events. Senior managers 
use formal Quarterly Management Meetings to provide feedback 
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to middle managers on how well their components have performed 
in meeting performance objectives for further dissemination down 
the line. Program managers use various meeting forms to obtain 
and distribute performance information. The Integrated Road Map 
and Master Schedule serve as one form of feedback to all 
employees. 


FINDING: The NRO lacks a comprehensive and consistent system for identifying 
performance indicators and providing performance feedback to all employees. 


tfOTJO) The NRO docs not maintain a documented, regular, 
routine process of performance data gathering, presentation" and 
feedback covering all aspects of the organization. Satellite 
development, launch, and operations indicators appropriately take 
a pre-eminent role; however, at the corporate and directorate level 
there arc few performance indicators for the support infrastructure 
of the organization. 

Managers could verbalize the performance indicators 
they used and communicated to their subordinates, but tew 
formalized them in written policy and procedure. Some managers 
used the obvious indicators, such as succc.ss or failure in achieving 
a launch and proper orbit, and raw production imagery, .signals, 
and communications output. Managers who have responsibility 
for support and administrative functions usually do not have 
quantitative or well defined performance indicators. They often 
use subjective assessments to indicate progress. 

(U) A well developed and documented system of corporate- 
wide performance indicators coupled with feedback mechanisms 
appropriate for various corporate levels, would provide visibility of 
corporate health, establish a basis for internal and external 
customer satisfaction, and provide a method to identify problem 
areas to management and employees for resolution. 

The Government Performance and Results Act 
(GPRA) of 1993 will require all federal organizations to establish 
formal performance indicators by 1999. The NRO needs to 
address the complex issue of formal performance indicators and 
prepare itself to implement the GPRA. 


RECOMMENDATION 9: The DNRO direct development and implementation of 
corporate-wide performance indicators and measures of effectiveness for managers to use 
in the Internal Management Control Program and to provide a basis for meeting GPRA 
requirements. Completion date by 31 October 1996. 
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( rOVO) DNRO COMMESTS: 

iTUUTTi Concur. The NRO Associate Director for Resource Oversight and Management will 
prepare a plan to develop and implement corporate-wide performance indicators and measures 
for managers. These measurement tools will be used in the internal management control 
program and will he re.sponsive to Government Performance and Results Act (GPRA) 
requirements. Corrective action completion date is 31 October 1996. 


EVALUATION OF DNRO COMMENTS: 

t^^W» We consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 
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(U) MANPOWER 


(II) BACKGROUND 


(U) Three Primary 
Manpower 
Authorization < 
Sources 


(U) Manpower management is one of the responsibilities of 
every activity director. We define manpower management as the 
management of the organization’s structure and the manpower 
authorizations. Personnel management is discussed later in this 
report. 


(U) Manpower management is an essential part of the effort to 
improve efficiency and effectiveness. An organization’s 
manpower requirements should be based upon processes that 
identify program objectives and the projected manpower needed to 
achieve those objectives. 


Manpower management throughout the DoD is 
governed by a 30 June 1993 manpower guidance memorandum 
signed by the Under Secretary of Defense, Personnel and 
Readiness. That memorandum .states it is the overall responsibility 
of organizational heads and program managers to ensure 
accomplishment of their specific mis.sio n/program responsibilities 
in the most cfticient manner possible. 


(b)(3) 10 use 424 


The NRO obtains its overall manpower authorizations or 
positions to support the NRP from three primary sourccs--the NRO 
itself, the DoD. and the CIA. For Fiscal Year 1996. the NRO is 


allocated 


positions to support the NRP. However, the NRO 


itself owns only J]Q of the total allocations. of which arc 
government civilian and Q arc Air Force military, Tlic other 
positions are authorized and funded by the parent organizations. 
Congress authorized the (SI positions for the NRO's restructuring 
needs in such support areas as logistics. Office of Inspector 
General. Office of General Counsel, and administ ration. The 
remai ning positions belong to cither the DoD rflStllrti or the 


CIA II3B) individuals encumbered in those po.sitions 

being assigned duties at the NRO from their parent organization. 


(U) Tvro Other 
Sources of 
Manpower Support 


. ^ Besides authorized positions, the NRO has two other 
primary sources of manpower-borrowed and contractor. The 
NRO has approximately full-time individuals known as 
"borrowed" manpower. While common in intelligence agencies, 
this is a source of manpower not normally available to federal 
organizations. These arc military pers onnel and government civil 
servants not assigned to any o f the riWirt NRP po.sitions. and 
should not be confu.sed with the NRO authorizations. 'Dic.sc 
individuals work in NRO offices throughout the organization, 
receive tasks from an NRO manager, and provide full-time support 
to the NRO. However, their positions arc counted against the 
organizations from which they come. Those organizations believe 
they derive a benefit by providing individuals to the NRO. Some 
of the organizations providing the NRO such manpower arc the 
DoD/lG. the CIAyiG. the Community Management Staff, the CIO. 
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the Defense Mapping Agency, the DIA. and the Air Force Space 
Command, 



(EMiO) ISSUE: The NRO does not have adequate processes and mechanisms to 
deternune and manage manpower requirements. 


(TOt)^) FINDING: The NRO lacks an adequate manpower requirement determination 
and validation process. 


(U) Determination 
and Validation of 
Requirements 


Wc found the NRO lacks well defined and documented 
processes for determining, validating, and managing manpower; no 
system exists based on DoD or CIA guidance. Neither manpower 
managers at the NRO nor supp orting organizations could provide a 
basis for the N'RO's current rtaWH authorized positions as the 
minimum needed for efficient and effective mission 
accomplishment. Senior management and HRMG personnel 
indicated the NRO uses an informal system in which the various 
management levels affected discuss their needs and then staff a 
request through the DNRO. 


(WBTWe did find the Information Technology Group (ITG). in 
the Communications Directorate, performed several studies in the 
area of resource planning over the past year. One of these studies 
produced manpower standards for application in ITG detachments. 
Wc were not informed of. and did not find any. similar resource 
planning studies in other NRO elements. 


(U) .Allocation of (FOUO) Officials throughout the N'RO stated they do not have 

Authorizations a process for allocating current authorizations or any subsequent 

reductions or additions in authorizations. To date, the NRO has 
accepted significant reductions from its parent organizationN 
without issuing reclamas. To accomplish this, the NRO uses an 
undocumcntcd procc.ss to identify and eliminate vacant positions to 
meet manpower reductions imposed by the parent organizations. 
A yearly review of the vacant positions by senior NRO officials 
determines which ones arc critical and the non-cssential positions 
arc targeted for elimination. To date, the NRO achieved required 
reductions through eliminating current or projected non-es.scinial 
vacant positions. Wc noted the review process docs not validate 
nor reallocate authorizations bused on the prioritized work 
requirements. 
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(L ) Multiple Causes 
and Impacts 


The lack of compliance with DoD guidance results 
from ambiguity in the NRO chanering documents as to what 
directives apply and lack of specification on the sourcing of 
personnel. The NRO. based on .streamlined management practices 
and the joint nature of the organization, does not follow DoD 
manpower management guidance. In additi on. [ 

_ Furthermore, we found the N'ROVnibmt}M^isc borrowed 
and contractor personnel provides little incentive to institute a 
manpower management program. 


(rotW) Without any type of formal manpower requirements 
determination process, the NRO cannot substantiate its manpower 
needs to include both the number of personnel and the skills mix 
required for efficient and effective mission accomplishment. This 
deficiency makes any NRO manpower requests for additional 
manpower or directed reductions suspect. 


(POLIO) RECOMMENDATION 10: The DNRO direct development and implementation 
of a documented standardized manpower management program using appropriate DoD 
and DCl guidance. The process should consider the borrowed and integrated contractor 
personnel. Completion date by 31 July 1997. 


DNRO COMMENTS: 

Concur. The NRO wU! initiate an external, government-led (contractor-augmented) 
workforce analysis to develop standardized procc.sses to determine!validate the level of effort 
ree/uired to complete each functional task within the NRO's mis.don. This initiative will /m* the 
approved mission-related conclusions and recommendations from the Jeremiah Pane! as the 
basis for the workforce analysis. Based on this premise, tve estimate completion in July 1997. 


ffWW) EVALUATION OF DNRO COMMENTS: 

(PGtf^) Wc consider the proposed actions of the DNRO to he responsive to the 
Recommendation. 
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(U) CONTRACT MANAGEMENT 


(1) BACKGROUND 


(U) Contract management at the NRO involves: the 
determination of requirements for major systems, supplies, and 
services: development and execution of plans to contract for those 
requirements: and designation, certification, and pcrformtuicc of 
qualified personnel to manage and monitor the resulting contracts. 


The NRO Office of Contracts executes, moditics. 
admin isters. and terminates contracts to support the mission of the 


1 )(c) (b)(3) 10 use 424 I 



The Office of Contracts is consolidating its resources, 
authorities, oolicies. and oroccdurcs based on recommendations 


(b)(3) 10 use 424 


n.i 


from the 1992 Fuhrman Report | _ 

The recommendations included consolidation of the contracting 
office personnel, with its own rtilcs and regulations, into one 
contracting organization with a single NRO-specific acquisition 
manual. The Office of Contracts is currently developing the NRO 
Acquisition Manual (NAM) to accomplish this task. The NRO 
intends the NaM to combine and document the best procurement 
practices of the former programs. 


(PW©) Until the NAM is implemented, the Office of 
Contracts and the staffs within the individual directorates arc 
continuing to apply the procurement regulations of the parent 
organizations for all current or near-completion contracts. The 
NRO did not alter the procedures for on-going contracts because it 
would have imposed unacceptable risks and added costs to the 
programs. 
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OSD - (b)(1) EO 13526 Section 3.3(1) 


(FOUQ) The NRO. however, in exempt from the governing 
provisions of DoD Directive 5000,1, Defense Acquisition, dated 
23 February 1991, based on the Secretary of Defense letter of 27 
August 1995, National Reconnaissance Office (NRO) and DoD 
Directive 5000.1. 


( FOUO ) ISSUE: The NRO has adequate processes and mechanisms in place to monitor 
and manage its contracts with the exception of: certifying funding documentation; 
payment and invoicing procedures for cost reimbursement contracts; defining the 
responsibilities of the Contracting Officer’s Technical Representative (COTR); and 
procedures for monitoring some aspects of the operations and maintenance contractor 
for the NRO Headquarters facilities. 


(U) POLICIES AND 
PROCEDURES 


Wc selected at random a number of high dollar value 
contracts covering a wide spectrum of NRO requirements to 
examine the processes bv which contracts were awarded and 


managed. I 

(b)(1)(c) (b)(3) 10 use 424 






40 The procurement processes the NRO followed arc both 
complex and highly structured. While the contracts wc examined 
followed the specific regulation base 
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FINDING: The NRO does not have established policies requiring that NRO 
contracting ofTicers receive a written certification of appropriated funds availability prior 
to the processing of contract actions. 


(U) Funding Wc found that the acquisition procedures used by the 

Certification NRO are not in compliance with 31 L’.S.C. 1341. FAR 

1.602(1 Kb). FAR 4.K03. and FAR 32.702 which require the 
written certification of appropriated funds availability prior to 
contract actions being taken. Wc found contract files where the 
contract actions pre-dated funding certification and pre-contract 
concuiTcncc forms, a type of approval. Typically, contracting 
officers took steps to ensure that funds were, or shortly would be. 
available such as obtaining this information from budget personnel 
within each directorate; however, the contract files do not 
document the contracting officers* actions. 

The current NRO procedures for providing 
certification of funds availability to contracting officers is not 
con.sistent. and docs not cn.sure that the conU'acling officer has a 
written commitment in hand prior to obligating contract funds. 
Failure to ensure receipt of appropriated funds places the NRO and 
its contracting officers in fiscal jeopardy. 


(fOtrO) RECOMMENDATION 11: The DNRO direct development and implementation 
of a procedure ensuring NRO contracting officers receive a certification of funds 
availability prior to taking any contract action, and that the record of that certification is 
maintained in contract files. To be completed by 1 September 1996. 


( f'OUO ) DNRO COMMENTS: 

i rOUO ) Concur with caveat. We assume the definition of "certification" implies "assurance." 
The NRO Acquisition Manual provides a consistent procedure for all NRO contracting officers 
to ensure written a.S5urancc of funcE availability is received and maintained in the contract file. 
IVV consider corrective action of this Recommendation complete. 


imm) EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions of the DNRO to be rc.spansivc to the 
Recommendation. 
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FINDING; The NRO does not have adequate procedures for managing contractor 
payments of cost-reimbursement contracts. 

(U) Payment and We determined that the NRO lucks consistent 

Invoicing procedures for assuring interim monthly contractor payments tor 

Procedures cost reimbursable contracts are certified for technical performance 

by the responsible Contacting Officer's Technical Representative 
(COTR). It is normally the COTR who has authority, based on 
technical knowledge, to certify payments are supported by 
perfonnance. Contracting officers arc often certifying contractor 
payment for technical performance without full knowledge of 
contractor performance. 

(POW®) Because of the large number of cost-reimbursable 
contracts and the magnitude of the dollars involved, the Office of 
Contracts should implement procedures to more closely review 
costs on these high risk contracts. We found the Office of 
Contracts relied on the Defense Contract Audit Agency for review 
of allowable contract costs on reimbursable contracts rather than 
reviewing these contracts themselves before the NRO makes 
payment. 

There were inadequate procedures for assuring all of 
the documentation on a contractor's performance is complete and 
available to award fee boards. We found some instances where 
customer comments were not retained in the contract files. 
Although NRO personnel had taken many of the required steps to 
evaluate a contractor's performance, the briefings given to the 
award fee board by the COTRs presenting the government's 
position should be backed up with documented performance 
evaluations. 


(POtTO) RECOMMENDATION 12: The DNRO direct development and implementation 
of standardized procedures for processing cost-reimbursement contractor payments, and 
implement an effective mechanism to ensure documented COTR review of applicable 
contractor invoices. Action to be completed by 31 October 1996. 


rPWfOj DNRO COMMENTS: 

Concur with caveat. The NRO does not have '’standardized** procedures as su^^e.sted 
by Recommendation 12: however, they are adequate. V/e agree that the DNRO .should direct 
development and implementation of standardized procedure for processing co.st reimbursement 
contract payments: however, the procedures will not require documented COTR review. Instead 
the NRO procedures will re-emphasize FAR procedure that the Contracting Office should .seek 
expert advice as appropriate. Wc believe that requiring documented COTR review would not 
only narrow the NRO contracting officer's latitude to exercise business judgment, but would 
create an extreme administrative burden. Corrective action completion date is 31 October 1996. 
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(mmI EVALUATION OFDNRO COMMENTS: 

IVV consUlcr the proposed actions hy the DNRO to be partially responsive to the 
Recommendation. The Recommendation focuses on interim monthly payments for those cost 
reimbursement contracts which involve eni(ineerinf( and technical profiress hy a contractor. 
While u’c acknowledge the FAR does not retfuire COTR verification of contractor's technical 
progress for the contracting officer to certify interim payments, it is sound bieiincss practice to 
require the non-technically trained contracting officer to obtain the documented concurrence of 
the COTR that the contractor has. in fact, made the engineering progress claimed. There is 
precedence in other DoD agencies for monthly or quarterly documented COTR reviews of 
contractor technical progress. DNRO needs to direct changes to the NAM reflecting COTR 
verification of contractor technical progress where appropriate as standard operating practice. 
NAM changes to he made by 31 October / 9<)6. 


(II) ROLES AND 
RESPONSIBILITIES 


TPOtJO) Roles and responsibilities for contract management 
personnel arc generally well-defined. However, there are two 
areas the NRO must address to Provi^ better contract 
management within the organization: liniitution on 

delegation of authority and the role of the COTR. Each directorate 
and office has its own dedicated contracting division and staff, 
following the decentralized team concept. Contracting personnel 
work closely, and arc usually collocated, with their counterparts on 
the technical team. This fosters clo.se communication and almost 
daily contact with members of the team, including program and 
budget personnel. We found the NRO contracting personnel to be 
vocal and informed members of the team, participating in Program 
Review Boards. Configuration Control Boards (CCB). 
negotiations, and other related meetings. 
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■ ( i POUO ) For truining and certification requirements. Air Force 
and Navy contracting officers follow the regulations of 
Defense Acquisition Workforce Intprovcment A ct. 

_fouml 

that contracting officers assigned to the NRO had proper 
certification from their parent organizations. 


(U) Contracting officers on complex technical contracts or on 
service contracts that require clo.se monitoring, often appoint 
COTR.S. While many agencie.s have clear guidance on the duties, 
responsibilities, and requirements for COTRs. the FAR itself 
provides little guidance and it is left up to the agencies to develop 
COTR policy. 


FINDING: The NRO has not adequately defined, implemented, and 
communicated the roles and responsibilities for its COTRs. 


(U) Role of the 
Contracting 
Officer's Technical 
Representative 


Wc found the NRO docs not provide clear, consistent 
guidelines on the roles and responsibilities of the COTRs. This is 
due. in part, to the COTRs coming from different parent 
organizations with variations in their roles and responsibilities. 
The NRO has no program to indoctrinate assigned COTRs into the 
complexities of the NRO’s contracting environment. Of the 
COTTRs and project officers interviewed, wc found that not all had 
letters of delegation of authority, and about ten percent had not 
been formally trained. The quality and extent of COTR review 
varied within different sections of the NRO. largely based on the 
parent organization experience of the COTR. The NRO 
management is aware of this problem. They are reviewing issues 
of COTR training and delegation of responsibilities ajid plan to 
address them in the NAM. 


The COTR is often the on-site manager of the 
contract, and is the main point of contact with the contractor. The 
COTR normally gives technical guidance to the contractor, and 
provides day-to-day technical advice to management. Agencies 
usually have u rigorous screening procc.ss to develop their COTRs 
and ensure that they have adequate technical background and 
training for the jobs they arc required to perform. Because of the 
complex and highly technical aspects of the .NRO's acquisitions, 
the job of the COTR is critical to the mission. COTRs mu.st assure 
that contractors are performing adequately, arc on track. :uid 
within targeted costs for their as.signed contracts. 

The large number and high dollar value of NRO cost- 
reimbursement type contracts requires prudent contract 
administration. The FAR recognizes cost-reimbursement contracts 
require close attention by management. Unless there is adequate 
guidance which has been communicated to the workforce, there is 
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risk that COTRs will act outside the scope ot their author«\. and 
that contractors will be directed to act outside the scope ol the 
contract. It is in the NRO's best interest, as a good business 
practice, to establish consistent organization-specific COTR 
procedures and train the COTRs on them. The COTR can be a 
valuable tool to the NRO by ensuring that they are getting 
sufficient return of effort on their contracts. 


(POlO) RECOMMENDATION 13; The DNRO direct the development and 
implementation of consistent guidelines for the responsibilities of all NRO COTRs. The 
guidelines should incorporate a training program to reinforce the valuable role of the 
COTR. Actions to be completed by 1 April 1997. 


(rO(^ i DNRO COMMENTS: 

Concur. We have completed the recommended action to develop and implement 
consistent guidelines. The NRO Acquisition Manual (NAM} uu5 implemented on Jl .March 
1996. For the first time there is a consolidated NRO reference on a COTR's role and 
responsibility. The NAM contains in excess of 40 references, and we started an e.xtensivc COTR 
NAM familiarization training program on 23 April 1996. 

(fOidO) A formal training program is needed. We will need to develop a cour.u and then 
implement it. Corrective action completion date for course development: 30 September 1997. 
Corrective action completion dote for training implementation: 31 December 199". Resource 
con.straints prevent earlier accomplishment of this more formal training effort. 


EV ALUATION OF DNRO COMMENTS: 

(FOU^) We consider the proposed actions of the DNRO to be rcwpoiusivc to this 
Recommendation. However, actions are to be completed by I April 1997 vice the proposed 31 
December 19^)7. 


(I’l MONITORING treTTO) The monitoring of coniracis for major systems. 

supplies, and services at the NRO is adequate with the c.vception ot 
the review of invoices by COTR personnel and the monitoring ot 
some aspects of the operations and maintenance contractor for the 
NRO Headquarters facilities. Wc have already discussed the 
valuable role the COTR plays in contract management. The NRO 
ha.s a number of processes and mechanisms in place to monitor 
contractor performance and to ensure that it acquires the quality 
systems to support its mission. These include; monitoring of 
contractor progress by COTRs. contracting olficcrs. and program 
managers; the periodic monitoring ot contractors by review 
boards: Defense Contract Audit Agency review of allowable 
contractor costs; and the review ol contractor-generated contract 
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fund status reports, earned value reports, and cost schedule status 
reports, 

(D) Management (rOU0 ) The NRO has established a series of management itnd 

and Business business boards to monitor and control all aspects of the 

Controls contractor's activities in the complex major acquisition process. 

Some of the boards that have been established and arc working 
well are the CCBs. award fee boards, and program review boards. 
These boards impose control and structure on the entire acquisition 
process and ensure that the NRO internal and external customers 
have addressed all interface questions. They are also the venues 
by which budget and funding issues arc discussed and resolved. 

The use of award fec/incentive contracts by the NRO 
required the creation of award fee boards to determine whether the 
contractor has earned a fee and what that fee should be. We found 
the process to be well designed, documented, and followed. The 
evaluation standards and criteria considered by the board are 
included in the contracts. The process requires that contractors are 
apprised on the status of their fee position before any formal 
pre.scntation. The NRO also utilizes a series of program review 
boards to cn.sure that all parties to a contract arc aware of and 
address the business and technical issues on the specific contract. 


(FOllQ) FINDING: The NRO does not have adequate management controls over some 
aspects of its operations and maintenance contractor for the NRO Headquarters facility. 


(U) Management 
Controls for the 
Procurement 
Support Function of 
the Operations and 
Maintenance 
Contractor 


{b)(1){c) (b)(3) 10 use 424 


' The NRO uses __ 

Has its p rime contractor for operations and maintenance 
support. awarded contracts for purchase of land and 

.services to support the NRO facility collocation project, including 
all the interim buildings and Wcstficlds fadUt^ The work 
statement of one of these contracts authorizc.s to act as the 

agent for the NRO for its daily procurement support. This is a 
"pas.s-through" contract, i.c.. supplies and services arc purchased 
with no added fee or general and admini.strativc and overhead 
burden. Purchases for facility support and operation and 
maintenance arc made under another contract, and arc fully 
burdened. We did not review any aspects of the land purcha.se 
portion of the contract becau.se it has been reviewed imd audited 
extensively. We did. however, review the addition of a 
procurement support function into the "pass tlirough" contract. 


(Oi'D) We determined that the mechanism for making a major 
modification to the operations and mainten ance contract did rim 
followFA^zuidcline^^lescribet^elow. 

Major changes to the 

contract were made which increased the contract value from 

These changes were not supported by a 
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Uctcrmination and finding or u new justificanon and approval 
process. The NRO made a determination that a justification and 
approval process was not required because the changes were 
within the scope of the contract. Although the wording of the 
contract modification indicates it was a revision, the procurement 
function transfer was not adequately documented with a 
determination and finding on the reasons for the transfer. In 
addition, all reviews and concurrences were not obtained prior to. 
the effective date of the modification. This is a systemic problem 
in the NRO as pointed out elsewhere in this report. (Sec 
Recommendation 11.) 


We found the con tracting officer who authorizes 
invoice payment for the |]j2U||_ "pass through" contract is not 
receiving .sufficient back-up data or Pro of of rece ipt of the .supplies 
and services ordered for the NRO bv {QKf)][Si even though it is 
available elsewhere within the NRO or from CI SCO. The NRO 
contracting ofticer has been relying on the of the 

contractor^ receiving records, the "contractor’s inventory, the 
monthly financial status review reports, the contractor's approved 
invoicing procedures, and meetings between the NTIO program 
personnel and the contractor. The contracting officer should be 
receiving a monthly report of an independent assessment of the 
invoices paid and supplies received. 


(i@^Thc NRO relies on^^WUowocurc supplies and services 
tor the Headquarters elements. makes every attempt to 

follow FAR guidelines, but i.s under no contractual obligation to do 
so. It may be more cost efficient for the NRO to procure some or 
all of its supplies and services from approved government or 
competitive sources once .salaries, competitive pricing advantages 
and general, administrative, and overhead cost differenti als and 
profit are factored in. We reviewed a small ponion ofQQQm 
pass-through purcha.ses and. while we did not note any major 
discre pancieso n prices paid, we found .some "purcha.se orders" for 
over [(DliilOM which under the FAR would normally require a 
contract, and a sole source order placed against a basic ordering 
agreement for NRO should review its need to 

use a contractor in this manner when the contract becomes 
renewable in 1998. 


(©) RECOMMENDATION 14: The DNRO direct an audit of contracts to 

compare procurement options, including all associated costs, for mfiireNRO support. The 
audit will begin no later than 1 November 1996. 


D.WRO COMMENTS: 




Concur. NROUG will audit the 


(b)(1) 


0AM contracts hy I November 1996. 
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(rOUO) EVALUATION OF DNRO COMMENTS: 

V/e consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 


RECOMMENDATION 15: The DNRO direct development and implementation 
of a system to review contracts based on changes in scope or contract dollar value in 
accordance with appropriate contracting requirement authorities. Actions to be completed 
by 31 October 1996. 


(fimO) DNRO COMMENTS: 

Concur. The NRO Office of Contacts will address this issue of contract reviews based 
on scope and dollar changes in an update to the NRO Acquisition Manual. This update will he 
applicable to the whole NRO, and its e.xpected completion date is 31 October 1996. 


EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions by the DNRO to be responsive to the 
Recommendation. 


( rOKO) ISSUE: The NRO has adequate processes and mechanisms in place to manage 
and monitor the transition from three different contracting systems into one 
consolidated system. 


('PW®) The NRO Office of Contracts has maintained an 
aggressive schedule, with full commitment of time and resources, 
to complete and implement the NRO Acquisition Manual. The 
NRO intends the NAM to combine the elem eius the FAR* the 
Defe nse FAR Supi^lcmcnt. where applicable: 

_interim contracts policy directives; 

and other applicable regulations under one umbrella document. 


(F@®€)) The creation of the NAM as a supplement to the FAR 
is a far-reaching and a formidable effort. The NRO intends the 
NAM to address every FAR section with direction and guidance 
for compliance with the regulation, or to contain the basis for the 
deviation or waiver, its justification, and alternative regulation, 
process, or written clause to be used as the NRO standard. 


.SO 
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{P©W} Since Januaiy 1995, contracting officers hiive 
operated under NRO interim contracts policy directives which 
defined the conditions, proccsse.s. and documentation to be used by 
all contracting personnel until the adoption of the NAM. These 
directives identify the regulations for justification and approval 
processes, authority, delegation and approval levels required for 
N'RO contracting, the pre-contract role of the National Program 
Contracts Review Board, contract sciilcment and closeout, special 
and general exclusions, and organizational contlict of interest. 




___ /e found no coverage of this area 

in the draJt NAM we saw during the course of the inspection. The 
"Authorities and Delegations" section of this report provides more 
detailed discussion of the implications. 
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(U) INFORMATION RESOURCES 


(L ) BACKGROUND 


Informaiion Resources Management (IRM) is the 
process of managing information icsourccs to accomplisli 
organization missions, ll encompasses the information itself anti 
related rcsourecs. .such a.s personnel, equipment, funds, and 
information technology. The Paperwork Reduction Act (44 U.S.C. 
Chapter 35) establishes a broad mandate for organizations to 
perform IRM activities and Is the authority upon which federal and 
defense regulatory guidelines arc based. Section 3502 of the 
Paperwork Reduction Act exempts intelligence activities from 
compliance. While the NRO is exempted from them, the 
following regulations provide a foundation of sound business 
practices upon which to base an effective and efficient IRM 
program: Office of Management and Budget (OMB) Circular A- 
130. "Management of Federal Information Resources". 

15 July 1994; " DoDD 7740.1. "DoD information Resources 
Management". 20 June 1983; and. DoDD80(Xl.l. "Defense 
information Management Program," 27 October 1992. 

[RM in the NRO incorporates a fully integrated network of 
automation and communication.s which e«compa.s.s'cs the 
Automated Data Processing systems, the telecommunications ' 
means by which the information is moved to its internal customers, 
as well as the management proccs.ses to .support it.s acquisition. \ 
operation, and maintenance. The Information Technology Group 
(ITG) of the Communication-s Directorate i!» the office vested with 
this communications and information systems infrastructua" 
mission. The Director, ITG has budget and policy-making 
authority to establish and maintain the NRO communications and 
information systems itifrastruciurc. 
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. . . . ~ - ~ - - -- - 

ISSUE; The NRO does have an adequate support program to determine 
autoiTiated IRM requirements and to acquire and manage the Automated Information 
Systems (AIS) needed to accomplish its mission; ho^vever its IRM strategic planning 
process and monitoring programs are inadequate. 


(U) POLICIES AND fS) The NRO has adequate internal policies and procedures in 

PROCEDURES place to ensure they manage the IRM program using sound 

business praetiecs. While the NRO docs not dearly reteronce 
federal or defense guidance, their policies and procedures 
incorporate most of the requirements for IRM programs as stated 
in OMB Circular A-130 and DoD Directive 7740.1. The ITCi has 
created and publi.shed detailed internal proccdurc.s which provide 
guidance in IRM areas, such as requirements determination. AIS 
Life-Cycle Management, and software devciopment and data 
administration. 


td) The NRO bases its IRM policies on the extensive 
communications and automation experienee of the Director. ITG. 
as well as the NRO's interpretation of accepted practices of the 
DoD and CIA. Considering that the ITG hiLS only been active as an 
IRM activity for less than three years, they have achieved 
commendable progrc-ss in establishing and implementing policies 
and procedures to cftcciivcly and efficiently manage their 
operation-s. 

(^©W©) The area where NRO IRM procedures deviate most 
significanily from federal and Defense IRM program rcquireinems 
is in information sy.stems management oversight, specifically in 
the incorporation of u review program. Another difference results 
from their exemption from compliance with DoDD 3C1(XI I. which 
provides the basis for AIS Life-Cycle Management. The NRO is 
not required to follow specific guidance outlined in AIS Life- 
Cycle Management related direct!vc.s. however they do have 
.sufficient proccdurc.s established to satisfy the overarching DoD 
Life-Cycle Management objectives. 

CS> Policy and procedure devciopment is an ongoing process 
within the ITG. They make published documents available to all 
ITG personnel, and NRO personnel as appropriate, on the NRO 
NeXT-based Government Wide Area Network tGWAN). The 
ITG's ongoing effon to standardize operations through policy and 
procedure development should continue as it has a direct impact on 
implcmcniaiion of "sound business processes", which is a stated 
NRO IRM leadership concern. 

(U) ROLES AND fS) The NRO adequately identifies roles and responsibilitie.s of 

RESPONSIBILITIES the IRM suppon program so the organization Ciin be responsive to 

the user's infortnation needs. The ITG has a comprehensive 
Mission and Function.s document which clearly defines its 
organization and responsibility. The NKO’s internal IRM policies 
and procedures incorporate ihe identified roles and responsibilities. 
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IRM managers and internal customers have a thorough 
understanding of the ITG’s roles and responsibilities and the 
processes used to get support. Most NRO managers (90 percent) 
we interviewed were satisfied with the IRM support program and 
its ability to meet the organization’s needs. 

The Director. ITG. fulfills the role of the Senior 
Information Resources Mimagcmcnt Representative in the NRO 
and centrally controls all policy and procedures, budget authority. 
AIS acquisition, Life-Cycle Management, and operations and 
maintenance of all information resources. The Director. ITG. 
functions under the authority of the Director. Communications 
Directorate. 


The centralization of the IRM function under ITG is an 
ongoing and evolving process. For example, the ITG has 
identified at least ^ non-standard LANs whose functions cannot 
be tran.sfcrrcd to me standard NRO NcXi-based Management 
Information System until the organization migrates to a more open 
operating system architecture. 

(U) REQUIREMENTS 
DETERMINATION 
PROCESS 


Cu.stomer requirements must be signed by an authorized 
validator, a senior manager designated on'" a published validator 
list. The Chief. Customer Requirements Staff assigns a Point of 
Contact to work with the reque.stor on technically defining the 
requirement. It is reviewed by the ITG's Requirements Action 
Board which assigns the requirement to a responsible division or 
detachment for project development and management. The 
requirement is then tasked for future action at a Senior 
Management Board or a CCB. where project development will be 
reviewed. 


The NRO has an adequate procedure in place to identify, 
validate, and prioritize IRM requirements to meet the collective 
information needs of the NRO. The ITG has a .staff specifically 
designed to define customer require ments-the Cu.stomer 
Requirements Staff, This staff is the customer's primary interface 
with the IRM requirements process. 


Requirements are validated and developed to be compatible 
with the NRO communications and information management 
baseline architecture. The baseline defines the standard 
information technology processes and equipment for the NRO 
[0HII0I01 network. If it is not possible to satisfy the customer's 
requirement using the baseline, an exception may be approved 
after review by the CCB or an altematc solution may be propo.scd. 
This process provides sufficient control to ensure standardization 
and interoperability within the NRO. 


Requirements are prioritized based on the "required date" 
needed by the customer, and agreed upon by the ITG. Most 
customers we interviewed indicated that ITG has always met their 
mutually agreed upon operational date. A few customers were not 
satisfied with the responsiveness of ITG. They stated projects took 
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too long. ITG doc.s not keep them informed of the p'ojcct status, or 
the project was not developed to meet their technical 
specifications. Reviews of a .sample of the mentioned project filc.s 
revealed there were significant coordination problems, such as 
leasing lines, .system compatibility requirements, or rc.scarch 
engineering into new technologies, which made the original 
requested dates impractical. Our review showed that customers 
were either not .sufficiently informed or did not concur with the 
circumstances surrounding the project change. Improvements in 
customer interaction are addressed in "Program Monitoring" later 
in this .section. 


FINDING: The NRO does not have an adequate IRM strategic planning process 
at this time that provides a basis to address future information architecture requirements. 


(D) IRM STRATEGIC 
PLANNING PROCESS 


Although the IRM strategic planning procc.ss is currently 
inadequate, the NRO is well on its way to successfully 
incorporating previously decentralized planning efforts into a 
consolidated product .so that IRM resources can enhance future 
support of the NRO mission. The Vision 2005 IRM Strategic Plan 
is in draft form and is ready for review by .senior management. 
Some supporting plans, such as the ones for Asynchronous 
Transfer Mode technology and the MIS Modernization, ime 
developed through the concept phase. The IRM portion of the 
NRO's Integrated Road Map describes some target infrastructure 
technologies, but is not sufficiently developed to complement the 
NRO's long range goals. While a good .start on proper planning, 
these products do not yet fully define the future organization 
architecture by identifying specific objcctivc.s, the transition 
strategy to move from current to target architecture, resource 
requirements, and .scheduled mile.stones. 


^PWHfl OSD - (b)(1) EO 13526 Section 3.3(1) 
-'(b)0) EO 13526 Section 3.3(1) 


^9) Fiscal Year 1996 is the first year that the ITG has managed 
a consolidated budget and the linking between the budget line 
items, project plans, and .strategic plan objectives is still 
progressing. The ITG has an adequate method to control funding 
to currenf projects, but is still working towards adequately 
resourcing defined .strategic objectives. If the ITG's internal 
budget analysis process continues as observed, they will achieve 
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an adequate planning process to meet and fund identified strategic 
goals and objectives. 

There are several factors that affect the NRO's development 
of IRM strategic plans. One is the ITG’s ongoing effort to 
determine IRM baseline architecture. A baseline is essential to 
establish the current communications and information management 
processes and systems so that future plans can incorporate 
appropriate transition .strategics. All current projects arc evaluated 
for compaiibilUy with this ba.sclinc. and future plans reference the 
baseline architecture as the migration point. 


^■^PpSD - (b)(1) EO 13526 Section 3.3(1) 
OSD - (b)(1) EO 13526 Section 3.3(1) 


The NRO has adequate data administration and A IS 
program management to ensure current interoperability, cost 
efficiencies, and standardization within the NRO. They do not 
currently panicipaic in the DoD Data Administration Program. 
Considering their interest in increasing interoperability with the 
intelligence and Defense community, panicipation in the 
Functional Data Administration-Intelligence working group would 
be beneficial to their planning efforts. 

(J9) Senior IRM managers recently in.siitutcd three programs to 
improve IRM .strategic planning. First, they established an ITG 
consolidated budget and arc connecting projects and activities to 
budget and division/dctachmcnt line items. This is a necessary 
step towards determining funding for future projects. Second, they 
initiated project management training for ITG government 
personnel, who come from a predominantly operations and 
maintenance background. This should result in more 
comprehensive project planning and reinforce the strategic 
planning process. Third, they tasked the newly staffed ITG 
Systems Engineering Staff with the responsibility to strengthen the 
IRM strategic planning processes through development of the ITG 
Integrated Road Map and a more explicit strategic plan. 

(f*W©> One reason the NRO has not developed adequate IRM 
strategic plans is that its planning efforts have been focused 
primarily on near-term objectives, such as establishing operating 
procedures, supporting major organization restructuring, and 
determining baseline architecture. The.sc must be accomplished 
before concentrating on future planning so that there is a defined 
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base from which to plan. Now that many of the near-term 
objcctivc-s arc clo.se to completion, more rime mu.st be devoted to 
defining and developing the NRO's information management 
requirements and system architecture for future years. 

Inadequate strategic planning results in the 
unpreparedness of the NRO to meet future information 
requirements in support of the organization's mis.sion. NRO 
personnel arc frustrated with the slow progress towards a more 
open architecture. IRM managers find the lack of a well-defined 
future architecture impacts on their ability to execute current 
projects, as they arc unsure of whether the project will be 
compatible with future NRO technologies. Lack of a well-defined 
IRM strategic plan also impacts on future ycar.s budgeting 
processes as the architecture must be defined before resourcing can 
be accurately projected for it. 


RECOMMENDATION 16: The DNRO direct development and implementation of a 
complete IRM Strategic Plan which identifies current and future arctiitecturct transition 
strategies, objectives, milestones, and resourcing, and includes a periodic review 
mechanism, Guidance for IRM Strategic Plans may be found in 0MB A-130 and DoDD 
774fl.2. IRM Strategic Plan to be completed by 1 October 1996. 


( rOOO \DNRO COMMENTS: 

Concur. The NRO will continue establishing its strategic planning process as detailed 
in the In.yjection Report, A final Information Resource Management Strategic Plan wiU he in 
place by I October J996. 


evaluation OF DNRO COMMENTS; 

V/e consider the proposed lictkms by the DNRO to he responsive to the 
Recommendation, 


(U) MONITORING (POWO) The NRO conducts adequate monitoring of its AIS 

PROGRAM development and acquisition activities. It docs not have an 

adequate procedure to monitor customer feedback or perform 
internal assessments of its programs to determine if it effectively 
and efficiently mcefs the IRM needs of the organization. 

(#) Adequate processes exist to monitor the dam administration 
program. AIS development, and systems Life-Cycle Management, 
including a recapitalization program. ITG uses a formal project 
management process which incoqxjrates CCBs to review 
milestone accompli-shmcnt and ensure that the project is 
compatible with the baseline architecture .standard. 
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There Is no formal and consistent method to monitor 
feedback to and from the customer, and gauge the customer’s 
ultimate satisfaction with the IRM program. There arc a variety of 
informal ways in which management receives feedback such as E- 
mail from customers, interaction at the many organization-wide 
working group meetings, participation in other directorate’s CCBs. 
and an electronic survey of network customers in late 1W4 with 
plans for a follow-up in late 1996. While these are the type of 
efforts that are done as part of a good monitoring program, the 
NRO lacks a comprehensive plan to integrate this "customer 
feedback iitto process and product improvements. 

The Help Desk is the one consistent customer point of 
contact, and the majority of customers we interviewed had high 
prai.se for the quality and rcsponsivcnc.ss of scrs'icc from the Help 
Desk and the local ITG detachments. The Help Desk can be a 
valuable source of cu.stomer feedback and information, but there is 
no organization-wide method to allow management to monitor 
historical and trend analysis from this source. 

fS) Some customers indicated that they do not feel that they arc 
an integral pan of the IRM process, that ITG "works for another 
master" as one person put it. Several customers expressed 
frustration that they were not kept informed of project evolution. 
One reason for this is the lack of a consistent method to keep the 
customer informed of requirements development. 

The Customer Requirements Staff is designed to be the 
customer's interface with the ITG and works with The customer to 
initially define the technical requirements. Once the requirement 
is assigned to a project manager there is no uniform procedure to 
keep the customer apprised of progress or ensure concuirencc as 
the project is developed or milestones arc adjusted. The Customer 
Requirements Staff only provides updates to a customer if the 
customer calls to ask and they have no influence over how the 
project is developed since the project managers work for the ITG 
divisions or detachments. 

#) The comments on project timeliness that were noted in the 
previously discussed "Rcquiremcnt.s" section are also caused by 
in.sufficicnt interaction with customers. Since there is no 
consistent method of providing feedback, misunderstandings 
between the ITG and its customers will continue, ITG should 
develop and implement procedures to comprchen.sivcIy monitor 
ITG customer .support and feedback. This will aid the Internal 
Management Control program and help meet GPRA requirements. 


FINDING: The NRO IRM program lacks a consistent, comprehensive self- 
assessment review program to determine its effectiveness. 




S BCRDT DVDMjkM » Tj%LDNT IU3VIIOLE 













3EGRET«D¥l!MAf < ^TALEf<T I Cl! ! Vl tOEB 


INFORMATION RESOURCES 


fPOUO) The NRO docs not have an adequate method to assess 
the overall effectiveness and efficiency of its IRM program. 
Federal IRM guidance, as well as sound business practices, 
advocate some type of self-asses.smcm program. One option for 
cstablLshing a review program is available in the Office of the 
Sccrctaiy of Defense "Guide for Assc.s,siiig Component 
Information Management Activities". A self-assessment review 
program should part of the NRO's execution of its Internal 
Management Control (IMC) program, since both Information 
Technology and Telecommunication.s arc considered assessable 
units with”significant level of risk. 

Several IRM monitoring mechanisms are in use at the 
NRO: ITG quarterly budget rcvicw.s monitor the planning and 
funding process; the formal management processes of 
Requirements Action Boards, Senior Management Boards, and 
CCBs monitor the .systems development process; and off-site 
seminars provide opportunities for development of specific 
management interest item.s. The Communications Directorate has 
ra'cntly completed a review aimed at streamlining the 
requiremcnt.s development process and conducted a survey in early 
1995 aimed at improving internal processes. These arc all positive 
self-assessment efforts but lack incorporation into a comprehensive 
and on-going evaluation and improvement process. 

ITG's Detachment 7 provides a positive example of an 
internal process as.scssmcnt which has resulted in improved 
business practices. Positive and enthusiastic customer feedback 
during on-site interviews indicate Detachment 7 wa.s si)cccs.sful in 
restructuring its internal organization to be more customer 
responsive. 

(U) Senior IRM management has stated that their primary 
efforts have been on e.stablishing internal policies and procedures 
and ba.scline architecture, and now they can focus on improving 
customer interaction and monitoring proces.scs. In our judgment, 
the development of an IRM program is not a sequential process of 
establishing one criteria at a time. The institution of all five key 
IRM areas of policies and procedures, roles and responsibilities, 
requirements determination, .strategic planning, and customer and 
program monitoring, must develop and occur concurrently. 

) The impact of the lack of focus on customer and 
program monitoring is unresponsiveness to the organization's 
needs. Some customers do not have full confidence in the ability 
of the IRM program to meet their needs and circumvent the 
process to get what they want. The organization becomes focu.sed 
on maintaining in-place procedures, rather than looking for 
opportunities to improve management processes to better serve the 
NRO'.s mission. 
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fTOtf©) RECOMMENDATION 17: The DNRO direct development and implementation 
of procedures for a comprehensive IRM self-assessment review program, incorporating 
applicable DoD guidance and concepts similar to the OSD "Guide for Assessing 
Information Management Activities" and OMB Circular A-130. Actions to be completed 
by 1 September 1996. 


( mv i S) DNRO COMMENTS: 

Concur. Documents identified in the Inspection Report will he reviewed to identify 
intermit processes which can be used in NRO self-assessment. These procedures will be in place 
by 1 September 1996. 


\FUUU} EVALUATION OF DNRO COMMENTS: 

Vi/e consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 
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(t) CIVILIAN PERSONNEL 


(1) BACKGROUND 


(U) Civilian personnel management is a primar>- responsibility 
of organization managers. The organization’s civilian personnel 
office .supports management through proactive involvement, 
advice, and guidance and provides technical services to administer 
the personnel sy.stem. The personnel management system must 
comply with appropriate statutory', regulatory, and policy 
requircments. which must be clearly understood by employees, 
managers, and the personnel office, as well as the servicing 
external personnel support agencies. IF applicable. An adequate 
personnel management .sy.stcm includes programs for position 
management and classification, rccruitmcitt and placement, 
management-employee relations, employee training ;ind 
development, and technical support. It should also include a 
means to assess its overall effectiveness and its responsiveness to 
the needs of employees, managers, and the organization’s mis.sion 
as a whole. 


(U) The NRO's DoD charter directive states that the DNRO has 
the authority to "organize, staff, and .supervise the National 
Reconnaissance Office." However, the DoDD docs not specifically 
delegate civilian personnel management authority to the .S’RO. 
According to legal counsel, the charter directive is sufficient to 
give the DNRO personnel management authority, although an 
i^O senior personnel manager maintains that the authority should 
be clarified further. The DNRO has chosen not to exercise his 
staffing authority and instead relics on the CIA and the DoD. 
specifically the Air Force and Navy civjUaJi personnel systems, to 
pcrlorm all the NRO's personnel management functions. The 
NRO's HRMO coordinates with thc.se external support agencies 
and administers the NRO's civilian personnel management system. 


The NRO is staffed with civilian personnel from three 


paren 

and 

civi 



rganizations "|m from the Air Force. I 
from th e CIA, T he NRO also I 
osition I 


_ from the Navy 
-time Dcrmanciii 



(U) Personnel practices for Air Force and .Navy civilian 
employees of the NRO arc admini.sicrcd in accordance with Title 
U.S.C,. guidelines issued by the Office of Personnel Management 
and DoD regulations. Personnel practices applicable to CIA 
employees arc based on Title 50 U.S.C. and administered 
according to regulations which arc cxccpicd from Office of 
Personnel .Management guidelines, HRMG considers the 199.^ 
"NRO Rc.strticturc Guidance Document" to bo the .source 
document establishing internal NRO personnel policy guidance. 

(U) NRO senior management contends that the multiple parent 
organization concept, while challenging, gains the NRO u diverse 
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internal structure and provides an external pool of resources from 
which to select future employees. Senior management continually 
emphasizes the establishment of an NRO eor^rate culture and 
their determination to get personnel from the formerly separate 
programs to operate as a consolidated, cohesive team. 


(FOUO) ISSUE: The NRO has technically adequate processes, mechanisms, and 
management systems to support civilian persoimel and meet NRO needs; however, these 
multiple personnel systems do not support the goal of a consolidated, cohesive work 
force. 


(U) ROLES AND 
RESPONSIBILITIES 

(U) External 

Support 

Relationships 


The roles and rcspon.sibilitics for personnel 
management arc understood by HRMG. senior management, and 
e.uemal supponing agencies (parent organizations), although no 
formal agrcemcni.s exist. The NRO depends on the parent 
organization.s for personnel guidance and action. HRMG staff 
displayed thorough understanding of CIA and DoD authorities 
applicable to civilian personnel administration. 


(Snn The fundamental differences between the parent 
organizations personnel practices--based on statutes, regulations 
and policies—requires HRMG to maintain expertise about each 
personnel system. Interaction between HRMG and the Air Force 
and Navy parent organizations is centralized. 


OSD-(b)(1) 


lOSD-(b)(1) EO 13526 Section 3.3(1) 


(TUI U) FINDING: There are no Memoranda of Agreement (MO.As) between the NRO 
and the agencies providing civilian personnel services which define their responsibilities in 
accordance with DODl 4000.19, 

tPQWO) While the HRMG. senior NRO management, and the 
supporting external organizations have a positive and cooperative 
relationship which provides technically adequate personnel 
management support, there arc no formal agreements which 
specify roles and responsibilities for those involved in providing or 
receiving support. This results in the inability of the NRO and its 
supponing agencies to provide the most effective and efficient 
personnel management. As wc show in the following area, the 
HRMG and supponing agencies maintain duplicative personnel 
records and incompatible personnel databa.se systems. It is 
difficult for the .NRO to monitor the timeliness and quality of 
support received since there is no statement as to what support is 
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expected. The lack of stated responsibilities has adversely affected 
the quality of the NRO’s employee training and development 
programs and the NRO's ability to administer personnel records. 
We identify specific inadequacies in the employee training and 
development area later in this section. 


trOUO) RECOMMENDATION 18: The DNRO designate and direct a Support .Agreement 
Manager to develop and establish MOAs with the CIA, .Air Force and Navy to specih' roles 
and responsibilities for civilian personnel management in accordance with DoDl 4000.19. 
Actions to be completed by 31 July 1997. 


(r&m DNRO COMMENTS: 

(rOtf^Cnncur with caveat. C/.4 employees working within the NRO structure, incliulinf: rhasc 
who are defailed to NRP funded positions, remain CIA employees and arc entitled to the 
requisite personnel support from the CIA. Prior to any final agreement on the creation of a 
sineie civilian personnel system for the NRO and the subsequent .structure of that system, there is 
no need for, or benefit from, documenting the provision of personnel support to CIA employees 
in the NRO in an MOA with the CIA. 

( POtfO ) The NRO, as activity host, has no DoD official personnel authorities as defined in 
DoDI 4000.19. With the Air Force serving in the role of Executive Agent on the DoD side of the 
NRO, again there is no need to have an MOA with the Air Force since the Air Force is 
rc.sponsible for the Air Force people supporting the NRO. 

( FOVO ) An MOU with the Na\-v would be advantageous .since the personnel providing support 
to the NRO are as.signed to a larger Navy parent unit. A Navy MOU was .signed in February 
1996. 

( FOU ^) Therefore, appointment of a "Support Agreement Manager" and accomplishment of an 
MOU with the CIA (or any other MOUs which might he ncces.sary such as one with Army or 
National Security Agency personnel offices) depend on resolution of the Joint Inspection Team's 
single personnel sv,stem recommendation (See Recommendation 22), Should rc.solution of the 
single personnel system is.sue require MOU.s, a Support Agreement Manager will be appointed 
and MOUs accomplished by 31 July 1997. • 

Therefore, appointment of a "Suitport Agreement Manager" and accomplishment of an 
MOU with the CIA (or anv other MOUs which might be ncce.s.sary such as one with Army or 
National Security Agency personnel offices) depend on re.solulion of the Joint Inspection Team's 
single personnel system recommendation (Sec Recommendation 22), Should resolution of the 
.single personnel system issue require MOUs. a Support Agreement Manager will be appointed 
and MOUs accomplished by 31 July 1997. 


(P^m‘) EVALUATION OF DNRO COMMENTS: 

IVc consider the proposed actions by the DNRO to be partially responsive to the 
Recommendation. We agree with the DNRO's comments on deferring an MOA on personnel 
support with the CIA and with his statement that there is no need to have an MOA with the .Air 
Force. However. MOA.s!MOU.s with the Now. Army. andNSA on personnel support are needed. 
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The February 1996 Navy MOU, which generally establishes the relationship between the 
Department of the Navy and the NRO, must he supplemented by agreements to address the 
specific responsibilities of the Department of the Navy and the NRO regarding personnel 
support. Actions to be completed by 31 July 1997. 


(E) Internal 
Management 


(U) Understanding of current personnel management roles and 
responsibilities by NRO managers and employees is adequate. 
HRMG fills the role of facilitator between NRO-assigned 
employees and their parent organizations. They administer NRO 
personnel management based on the requirements and guidance of 
the three parent organizations. 


(U) While the HRMG uses a variety of methods for ivleasing 
personnel information to NRO employees. HRMG officials noted 
employee concerns that they do not receive sufficient management 
perspectives needed for employees to make decisions, such as the 
career service issue. Personnel information is disseminated in 
multiple way.s—E-mail, Director Notes, training sessions, and .staff 
meetings. Since there is no standard method by which all 
personnel information is released, employees might miss 
something critical. Each employee interviewed noted personnel 
information flow as a problem in one respect or another. We found 
employees believe senior and mid-level managers inadvertently 
filter the personnel information they receive at meetings and pass 
on to their employce.s. Some employees believe managers assume 
since they (the manager) received the information, that it has been 
disseminated to all employees, and so do not pass it on. Some 
employees cited management's singular focus on mission-related 
issue.s as a reason why they arc not cognizant of the importance of 
this personnel information to the employee. 


(U) 

ADMINISTRATION 
OF THE PERSONNEL 
MANAGEMENT 
SYSTEM 


(POtf©) We found the admini.stration of the .separate personnel 
sy.stem.s described below to be in technical compliance with 
regulations. However, we found the current personnel 
management anangement flawed on two counts: it docs not foster 
a consolidated, cohesive work force and it results in perceived 
inequitable treatment of employees in promotion opportunities, 
assignments, and awards for equivalent work. As a result, this 
section contains .several findings beyond tlie ability of the NRO to 
resolve. Depending on the SECDEF/DCI approved wording of the 
recommended DNRO propo.sed MOA, resolution of these findings 
would require changes to law. DoD Directives, or SECDEF and 
DCI agreements. 


Senior management asserted the diversity of 
experience brought into the NRO by the different personnel 
services far outweighs the administrative disadvantages of 
operating multiple systems. Yet. senior managers throughout the 
NRO arc attempting to develop an NRO consciousness in their 
employees. Retaining the different personnel systems docs not 
serve to reinforce this goal. 
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(li) Position 
Management and 
Classification 


emu AS PERSOSSEL 


Interviewees noted several issues. HRMG personnel noted 
significant duplicative efforts on their part and a lack of sufficient 
automated sy.stcms connected to piirent organization systems as 
detractors. Nearly all non-management employees inier\'ic\vcd 
about the personnel system commented on ditTiculty understanding 
an organization goal of a consolidated NRO while maintaining 
separate personnel systems. DoD employees perceive unequal 
opportunity when they compare their system to the seemingly 
more flexible and decentralized CIA personnel system, 

(rOU^ ) Results of our survey of NRO employees on those 
questions relating to human rc.sourcc management issues indicate 
that NRO managers and CIA employees arc very sati.sfled with the 
civilian personnel support received. However. DoD employees 
indicated dissatisfaction with some specific personnel issues. 
Results arc tabulated below. Comparative data between DoD 
civilians and CIA personnel indicate DoD civilians more 
dissatisfied with: personnel .support: being treated fairly on 
promotions, assignments and award.s; and training opportunities 
available to them. 


FWO) 


Survev 

Response* 

DoD Civ CIA 

I am sati.sfled with the 
personnel support I receive 

31% 

50% 

637r Agree 

22% Disagree 

Treated fairly regarding 
promotions 

33% 

44% 

52% Agree 

26% Disagree 

Treated fairly regarding 
a.ssignmcnts 

44% 

2K% 

51% .Agree 

25% Disagree 

Treated fairly regarding 
awards 

49% 

3.“^% 

51 % Agree 

27% Disagree 

Performance appraisals fairly 
reflect my performance 

79% 

15% 

X2‘‘f Aga'c 

9''f Disagree 

Satisfied with training 
opportunities available to me 
for professional development 

59% 

27% 

73'^( Agree 

15% Di.sagrcc 

Sufficient time, opportunity, 
resources for me to fulfill 
my training plans 

51% 

29% 

5X‘’f Agmc 

27% Disagree 


* Neutral responses not rcflccicJ. 


( POUOf While the administration of position management and 
classification i.s adequate by the standards ot the parent 
organizations, the effect of multiple procc.sscs docs not .support the 
NRO’s uoal of a consolidated, cohesive work force. The difference 
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between the DoD's rank-in-position practice and the CIA's runk-in- 
person system is the root cause of several of our findings 
concerning personnel management. 

(gCHJP) DoD requires that the position attd the individual 
filling it have the same grade and its classification program is 
tightly controlled through centralized management at an external 
(to the NRO) headquarters. A CIA-managed employee docs not 
have to have the same grade as the position they arc filling and 
CIA position classification is managed at the CIA directorate level. 
CIA-managed employees thus have more flexibility to fill 
positions within the NRO. HRMG and senior management 
brought to our attention examples where persons of different 
grades under different personnel systems were filling similar jobs. 
This creates inequity as the employees, by nature of their 
personnel system, arc compen.sated dilTercntly for doing the same 
work. 

(U) Recruitment and 

Placement 


( ' FOUQ) The CIA and DoD recruitment and placement procc-ss 
for hiring external applicants into the NRO is adequate. NRO 
senior management goes through an annual succession planning 
exercise to as.scss personnel requirements for the organization. 
This exercise includes: identifying vacancies created by personnel 
separations; determining external recruitment needs; projecting 
internal rcassignments: allocating position cuts mandated by the 
parent organizations; and, planning professional development for 
potential future program managers. 


Within both the Air Force and the Navy, external 
recruitment for NRO positions is accomplished through the 
respective, centralized c ommand structures via classified and 
unclas.sified channels. 


(b)(1)(c) (b)(3) 10 use 424 



(E0iH9) FINDING: NRO's internal reassignment process is inadequate because of the 
inherent disparity of considering DoD rank-in-position candidates and CIA rank-in-person 
candidates for the same positions. 


) The NRO's practice of announcing vacancies 
organization-wide is hampered by the inherent requirement to 
satisfy both DoD and CIA position classification and promotion 
procedures. Internal rcassignments of DoD personnel depend on 
external DoD cla.ssification specialist concurrence, whereas CIA 
personnel, due to their rank-in-person status, arc not dependent on 
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agreement of position classification and their grade to fill a job. In 
this case, the reassignment of a CIA person can be more readily 
effected because there arc no promotion or budgetary tsalary) 
constraints relative to the rca.ssignmcnt. The practice of 
announcing certain vacancies to DoD and CIA employees, and 
attempting"to fill these position.s by conforming to the requirnd 
practices of the disparate personnel systems inherently restricts the 
NRO’s ability to select the most capable, appropriate candidate for 
the vacant position. 


(II) RECOMMENDATION 19: Refer to the "Overall Recommendation" at the conclusion 
of this section. 


(rOUO ) DNRO COMMENTS: 

Concur with caveat. The NRO’s internal reassignment proce,ss is also limircil by 
civilian directives requiring positions to be filled by members of the parent organization (DoD in 
DoD billets. CIA in CIA billets}. While the Finding is true, HRMG works diligently to overcome 
the identified constraints. Job announcements are opened up to all government employees 
as.s}gned to the NRO when the requirements of the position allow for it, NRO leadership then 
works hard once the best qualified candidate is identified to work the slot issue. This means 
searching through the organization to find a vacant slot which can be matched to the selected 
person, and transferring that slot to the hiring Directorate or Office. Constraints of the various 
federal personnel systems and limited number of vacant positions does not ensure success in 
every instance. Since the "Overall Recommendation" is Recommendation 22, which .says that 
the DNRO should establish a single NRO civilian personnel system, »»r must defer action on 
Recommendation 19 until this issue is resolved. If a single personnel sy.stem is determined the 
appropriate solution to the NRO Personnel i.s.suc. the Finding will be resolved. If not. another 
corrective action will be proposed in follow-up and in place by 31 July 1997. 


EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. 


(E) Management* Managemcnt'cmployce relations in the area of 

Employee Relations employee performance standards and appraisals is adequate. The 

Employee Opinion Survey showed that K2 px'rcent of the 
respondents agreed that performance appraisals fairly and 
accurately reflect their performance. Managers who have 
subotdinates belonging to different systems must be proficient in 
multiple apprai-sal sy.stcms--not only the three civilian systems, but 
several different military evaluation sy.stems as well. Training on 
the various appraisal systems is offered by HRMG. but not all 
managers have attended. 


6BCBBT B YBMAW TittibCMT iiBYliehK 


67 









3E0RDT » DVEMAM « TALEMT IfcEVllOLC 


CIVILIAN PERSONNEL 


(II) DoD employees ami ihcir managers mutually establish 
criteria, based on the position description, upon which to 
determine the employee’s pertbmiance work plan. DoD 
employees have an annual, static appraisal cycle and ratings arc 
based on performance as measured against the standards defined in 
the performance work plans. CIA employees are also expected to 
perform to the duties and responsibilities of their position 
description and there should be ongoing dialogue between 
employees and managers as to level of performance; however, 
there is no requirement to develop written work plans. The 
appraisal process for CIA is a staggered, annual cycle based on 
grade: ratings arc based on the performance of those duties and 
responsibilities as defined in the position description. 


(BOOfi)) Management-employee relations in the area of 
disciplinary actions is adequate. The NRO’s unwritten policy 
concerning disciplinary actions is to encourage resolution at the 
lowe.st possible level, between employee and manager, regardless 
of the parent organization affiliation. However, managers within 
the NRO—whethcr Air Force. Navy or CIA—have authority to 
issue letters of warning and/or reprimand and in cases of adverse 
work performance document unacceptable actions on the pan of 
employees and any follow-on counseling. 


(fWO) Disciplinary recommendations for DoD employees 
arc forwarded by HRMG to the appropriate px?rsonncl management 
organization for ‘^^'’rionj^CjAmnplovceiJisdDlina^jssuci^irc 
referred to the CI A's 

when the employee's conduct may impact on 
security status. Otherwise. HRMG recommends the 
appropriate CIA counseling forum. 


FINDING: Employee promotions and awards are correctly managed in 
accordance with parent organization regulations. However, separate promotions and 
awards systems do not contribute to a consolidated, cohesive work force. 


The regulatory differences bctw'ccn the rank-in- 
position DoD work force and the rank-in-person CIA work force 
result in a disparity between the way promotions and awards are 
administered in the NRO. DoD employees arc nominated by their 
NTIO managers for awards, but the employee's parent organization 
actually approves the award. Awards are tied to the annual 
performance appraisal cycle and to fixed allocations and specific 
budget limitations. DoD promotions must be appropriately 
classified and approved prior to awarding the promotion, as 
discussed previously, and arc also subject to personnel funding 
constraints. CIA award and promotion authorities arc delegated to 
designated organizational management levels. Each office director 
has the authority to promote up through the grade of GS-1.*5 in the 
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CIA system, which uses a staggered cycle for promotions. CIA 
awards are not tied to a pcrtornTancc cycle nor are they subject lo 
the severe budgetary constraints which are imposed on DoD 
awards. 


(IJ) RECOMMENDATION 20: Refer to the "Overall Recommendation" at the conclusion 
of this section. 


DNRO COMMENTS: 

(Vi Recommendation 2f) is addressed in the NRO response to Recommendation 22. 


(li) Employee 
Training and 
Development 


(U) The HRMG Training and Development Division provides 
training oppommitics to all employees assigned to the NRO. The 
staff considers its biggest challenge to be organizational 
development, with a particular focus on blending the parent 
organization cultures. Such training initiatives as "Organization 
Culture" and 'Team Building" are intended to bring all NRO- 
assigned employees (both civilian and military) to a better 
understanding of the cultural differences of the parent 
organizations. 


FINDING: Employee training and development is inadequate to support 
knowledge and skills development necessary for all employees to fulfill (heir duties. 


(POUQ ) The NRO docs not have a way to assess skill level 
and needs of their employees so they can adequately plan for 
future training. While some offices have developed their own 
tailored professional training, there is no NRO-wide mitnagement 
of training requirements. 

Piirent organizations control the budgct.s and the 
positions for program-related technical training and required career 
development courses: the NRO is only a requestor of this support. 
While this works adequately for some skill areas--thc DoD and 
CIA contracting officers wc interviewed all hud the proper level of 
parent organization training-il docs not provide sufficient training 
to all NRO employees. Only 59 percent of DoD employees agreed 
(and 27 percent disagreed) that there were sufficient training 
opportunities available, while CIA employees expressed a 7.^ 
percent agreement and a 15 percent disagreement rate. The Air 
Force civilians wc spoke with were especially concerned about 
their limited opportunities for training. Because there are no 
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MOAs beiwccn the NRO and its parent organizations, there is no 
basis to determine whether each party is adcijuatciy supporting the 
training system requirements. 


(rOUO) RECOMMENDATION 21: The DNRO direct development and implementation 
of an annual process to forecast, plan for, coordinate, and obtain needed training for NRO 
employees. Actions to be completed by 31 July 1997. 


{ FOVO ) DNRO COMMENTS: 

Concur. Implementauon of the 1995 Training ami Development Strategic Plan 
includes initiative.^ to provide a .mtem for performing ongoing training need.s as.\e.wnenr to 
fulfil the NRO mission and facilitaie realKuiion of individual performance goals. In addition, as 
part of an IC effort, the NRO recently identified core and supporting skills and related training 
required to accomplish the NRO mission. This effort, and the NRO workforce analysis to he 
completed in early 1997, will be used to identify NRO-wide training requirements and establish 
an annual svsteniatic planning procc,\s. Full implementation of this process is e.xpecicd by Jl 
July 1997. ■ 


EVALUATION OF DNRO COMMENTS: 

IVe consider the proposed actions by the DNRO to be responsive to the 
Recommendation. 


(U) Personnel While the personnel records services system is 

Records Services meeting the needs of the organization, it is not as effective as it 

could be. The separate personnel management systems used by the 
CIA. Air Force and Navy, coupled "with security restrictions, 
prohibit interoperability between the systems. Employees' official 
files arc maintained at the parent organization; the HRMG 
maintains an employee file and a consolidated database of all its 
employees on its Human Resources .Management Information 
Systerh. While this provides centralized tile management internal 
to the NRO. it docs not interface with the parent organization 
systems and thus requires dual entry of data. The HRMG has no 
process to verify data integrity between the systems. While dual 
entry is inherently incftlcicnt. the employee also must ensure that 
records and data are accurate at both the parent orgiinization and at 
the NRO. 

The NRO docs not have an adequate records review 
process established to assist in maintaining records integrity. An 
MOA between the NT^O and its parent organizations could 
enhance the effectiveness of these separate systems by requiring 
periodic review in a usable format of the parent agency's records 
and incorporating employee review into this cycle. While this 
docs not resolve the database interoperability problem, it specifics 
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responsibilities tor support and provides a mechanism to improve 
accuracy of personnel records. 

(U) MONITOR (U) An adequate monitoring program provides an organization 

PERSONNEL with a way to determine quality, responsivenc-ss and accuracy of 

SUPPORT support, as well as employee satisfaction with personnel processes. 

It also furnishes an analysis tool to detect trends and anticipate 
problems so that actions can be taken to improve operations. 

) The NRO docs not monitor the quality or 
responsiveness of support its employees receive from their external 
parent organizations, nor their employees’ satisfaction with that 
support. We found the HRMG staff to be professional, technically 
capable and cnthusia.stic to provide whatever personnel .support 
they could. In their role as facilitator between the employee and 
the parent organization, they do not oversee how well support Is 
provided and cannot accurately assess when they should get 
involved to expedite the process. The lack of a review process for 
employee records, for example, results in difficulty detecting 
inconsistencies before they become problems. 

As discussed in the 'Training and Development” 
section, the NRO does not adequately monitor the training needs 
and requirements of its employees to ensure the right type and 
quantity of training is available. Without a mechanism to monitor 
employee development, the NRO cannot accurately determine if it 
has employees with the proper skills to perform its mission. The 
Management Services and Operations Office (MS&O) should 
develop and implement a process to monitor the .VRO's personnel 
support program. 

fTOtJO'l In our judgment, the continuation of .separate civilian 
personnel systems docs not support the NRO goal of a cohesive, 
con.solidated work force. Comparisons between the systems is 
inevitable and our interviews and employee survey prove that 
employees perceive unfair treatment. While we found each system 
administered properly in its own right, perception is reality to an 
employee. The administration of rank-in-person and rank-in¬ 
position personnel sy.stcms is so different that it cannot be 
equalized. If the DN’RO wishes to achieve the stated goal, the 
.VRO mu.st move toward a single civilian personnel .system. 


( FOH) ) OVERALL RECOMMENDATION 22: The DNRO include provisions for 
establishing a single NRO civilian personnel system, implemented over a period of years, in 
a new SECDEF/DCI MOA, as recommended in the "Authorities and Delegations" section. 
Actions to be completed by 1 June 1997. 


DNRO COMMENTS: 

Concur with intent of Recommendation 22 to improve civilian personnel management 
and support. However, the NRO is not prepared to commit to a single NRO civilian personnel 
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system at this time. Unresolved legislative packages and other IC reform initiatives arc dynamic 
players in the current IC environment. Additionally, the NRO's Jeremiah Panel is reviewing this 
specific issue. As with the NRO charter documents, once these political and administrative 
issues resolve, the NRO will include its personnel system recommendation in the SECDEF-DCI 
MOA and corresponding DoD Directive and DCl Directive (DCIDl. Target completion date is 
31 July 1997. 


ggg 


(b)(3) 10 use 
424. (b)(5) 


{b)(3) 10 use 424, (b)(5) 





(b)(3) 10 use 424. (b)(5) 


I’)(3) 10 use 424. (b)(5) 
pi)(3) 10 use 424. (b)(5) 


TTWTOJ EVALUATION OF DNRO COMMENTS: 

Wc consider the proposed actions of the DNRO to he responsive to the 
Recommendation. Target I June 1997 as the completion (late vice 31 July 1997, 
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(U) MILITARY PERSONNEL 


(V) BACKGROUND 


(U) Military personnel management programs typically include 
processing personnel actions such as promotions and* awards: 
evaluating ^rsonncl performance: coordinating service directed 
and professional development training; and providing separation 
and transfer support and counseling. Many DoD components 
sponsor joint activities and comply with policy concerning joint 
duty qualification. Title 10 U.S.C.. the 1300 .series of boD 
Directives and Instructions and governing Service regulations 
prc.scribc military personnel management. 


(U) Service headquarters normally control the assignments 
proce.ss using various forms of skill specialty codes. To ensure 
proper skill development, personnel require specific training at 
particular points dependent on rank and skill specialty. Tliis 
training is managed at Service specific levels. 

The original NRO Programs A. B. and C maintained 
tlieir own personnel staffs and relied on the parent orgcinizations to 
provide support to them. Today, the Military Personnel Division 
(MPD) of the HRMG. serves as the focal point for the NRO 
assignments process and provides tailored personnel suppon to the 
military personnel of the NRO. 


(91 As of September 1. 1995 
NRO military staff totalling Hal 
Army officers and enlisted personnel. 
Joint Duty Assignment Li.si po.sitions. 


i hc MPD provide! 
Air Force. ^ 
The NRO 


d service to 
Navy, and 
maintains 


i 

no 


ISSUE: The NRO has technically adequate processes, mechanisms, and 
management systems to support military personnel and meet the needs of the NRO; 
however, the NRO needs to update Memoranda of Understanding and Agreement 
(.MOU/MOA) and monitor service provided to military personnel. 


FINDING: The NRO lacks adequate and current MOUs/MOAs specifying 
military personnel support responsibilities. 


an ROLES AND 
RESPONSIBILITIES 


(U) Memoranda of 
Understanding and 
Agreement 


(U) The NRO has MOUs and MOAs with the Departments of 
the Navy and Army covering the contribution of personnel to the 
NRO and functions to be performed by each organization. 

TPWUO)' We found the NRO has not clearly established roles 
and responsibilities through appropriate MOUs/MOAs and 
Support Agreements regarding the management and support of 
assigned military personnel in accordance with DoD Instruction 
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4000.19. Interscrvicc and Intragovcmmental Support. Without 
clear and current guidance on which organization provide.s what 
functional supportT support systems cannot meet expectations of 
the organizations or people involved. 


(ft*® ) A 9 July 1976 MOU with the Assi.stant Secretary of the 
Navy (In.stallations and Logistics) defines the relationship between 
the Navy Space Project. Program C. and the NRO. However, the 
MOU docs not address personnel support to any degree. Another 
MOU from 19S7, signed by the Director. Program C. and the 
fjhivid^curity Group Command provides Naval support to the 
program. The MOUs do not reflect the 1992 NRO 
restructure and consolidation or a system of periodic review. The 
significant changes since the original memoranda leave 
responsibility for Navy personnel .support in question. (Note; 
During the course of the inspection, the N'RO and the Navy were 
negotiating an MOU to update the responsibilities of each 
organization for support services.) 


(8^) An MOA with the Secretary of the Army, dated 30 June 
1978. defines the interface between the Army Space Program 
Office and the NRO. It states the Army Deputy Chief of Staff for 
Operations provides personnel support, but docs not specify 
further. While it specifically addresses officer support to NRO. it 
fails to address enli.sted support being provided. We found no 
indication of periodic review of this 17-year'Old document. 


(■Si*©) NRO personnel believe they do not require im 
MOU/MOA with the Air Force. They believe the designation of 
the DNRO as Assistant Secretary of the Air Force (Space) and the 
Director of Launch and SIGINT as the Director. Secretary of the 
Air Force for Special Projects, provides adequate means of 
obtaining Air Force suppon. An MOU/MOA with the Air Force 
would be beneficial in covering the eventuality of ihe.se positions 
not being dual-hatted. 


{TOUU) The NRO depends on parent Services to provide 
support regarding professional military education, skill specific 
.service training, drug testing, and other programs. The NRO 
maintains limited experti.se in some areas to help their personnel. 
The existing MOUs/MOAs do not address these functions and this 
results in duplication of responsibility similar to that identified in 
the civilian personnel section. Thc.se responsibilities should be 
clearly specified in the MOA or a separate suppon agreement that 
provides more specific information. 


RECOMMENDATfON 23; The DNRO designate and direct a Support 
Agreements Manager to develop a single comprehensive agreement with each supporting 
military organization in accordance with DoDl 4000.19. .Actions to be completed by 31 
December 1997. 
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MILITARY PERSONNEL 


( P&V& i DNRO COMMENTS: 

(nff9) Concur with the intent of the Finding and Recommendation 23. Reference earlier 
response to Recommendation IS. While the military systems are not ejected by the single 
civilian personnel system determination, they may be effected by other on-going initiatives 
relative to the entire intelligence community (IC) - legislative and otherwise. (Reference 
DNRO response to Recommendations /. 2. and 3.) Pending resolution of the IC issues and 
appointment of a Support Agreements Manager, negotiations of military personnel agreemenis 
will be accomplished by 31 July 1997. 


(Fm€>l EVALUATION OF DNRO COMMENTS: 

( FOUO) We consider the proposed actions by the DNRO to be responsive to the 
Recommendation. However, these actions are to be completed by 31 December 1996 vice the 
proposed 31 July 1997. 


(C) External 
Relationships 


(LI) Internal 
Relationships 


fS)*®) The MPD functions as the KRO liaison and facilitator 
between the Service personnel support heaUquaners and the NRO 
managers and personnel. The MPD works directly with the llih 
Suppon Wing at Bolling AFB and the USAF Personnel Center at 
Randolph AFB; the Space and Naval Warfare Systems Command 
clement: and the USAF Army Element within the Army Office of 
the Deputy Chief of Staff for Operations. 

(Si'S) The Navy docs not have personnel professionals 
a.ssigncd and located at the NRO headquarters, unlike the Air 
Force and Army. Rather, the Navy consolidates this function 
within the Space and Naval Warfare Systems Command and 
maintains tighter service control of Navy filled NRO positions than 
the other services. Wc were told the planned revision of the NRO- 
Navy MOU may provide for integrating Navy personnel specialists 
into the MPD similar to that of the other .services. 

(S) The Deputy Chief. HRMG. an Air Force officer, primarily 
directs .service and support to military personnel through the MPD. 
The Chief. MPD. an Air Force civilian, with a staff of civilian and 
military employees, provides military personnel a centralized link 
into unclassified parent Scrvicc.s. 

) Like the civilian personnel section, the MPD uses the 
Human Resource Management Information System to track 
military personnel. The limitations of this system, as enumerated 
in the civilian personnel section, al.so exist regarding military 
personnel. While the system meets the needs of the organization, 
it is inherently inefficient due to dual entry of data. Parent 
organizations maintain employee official files systems, while the 

HRMG maintains a file system with duplicate information. 

\ 

{(N©'!?©) The NRO docs not have an adequate records review 
process established to assist in maintaining records integrity. An 


9EOnET « DVEM4N " TA ' fcEMT ICEVllOLE 


75 












SECRE T ^BVEMAff- T ALB t^T KBVllQfeE 


MILITARY PERSONNEL 


(U) Assignments 
Process 


(II) Management 
Training on Military 
Personnel Needs 


MOA between the NRO and the personnel parent organizations 
could enhance the effectiveness of these separate systems by 
requiring periodic review in a usable format of the parent agency's 
records and incorporating employee review into this cycle. While 
this would not resolve (httabase interoperability, it would 
reasonably ensure personnel record accuracy. 

( rOW0 ) Processes used for filling position vacancies depend 
on the Service designated for the position. The NRO obtains 
listings of pcrsonncrmecting requirements from the Service focal 
points and makes some by-namc-requc.sts based on information 
from currently a.ssigncd personnel. The NRO or the Service makes 
appropriate preliminary security background inquiries. The NRO 
then makes a selection and the Service focal point serves as the 
interface to get the person assigned. 

Some personnel questioned the need for Service 
as.signment personnel to be BYEMAN cleared. While the need for 
BYEMAN cleared individuals at the assignments locations may be 
beneficial to some extent, a review of security criteria indicated 
establishment of personnel qualifications .should not require the 
BYEMAN caveat. 

We found the internal procc.s.ses used by the NRO for 
assigning personnel within the NRO met the needs of the 
organization and the personnel. However, interviews indicated the 
Navy exerts more control over personnel position management 
than* the other services making some moves more difficult. Wc 
found no significant impact from this; however, the NTiO could 
clarify this is.sue in the recommended MOU'MOA revision. 

(EW©) The NRO elected not to implement joint officer 
management provisions of the Goldwater-Nichols Act because 
they thought the provisions would impede accession and retention 
of personnel in the NRO. In 1992. the NRO rcvi.scd that decision 
and in a 14 August 1992 DNRO memorandum rcquc,stcd 
DEPSECDEF to approve .‘'O percent of NRO militaty officer 
positions as’Joint Duty Assignment Li.st. The Joint Chiefs of Staff 
imposed a moratorium before DEPSECDEF made a decision. In 
May 1995. the NRO addressed the is.suc again with a 
memorandum from the DDMS to the Director. Vlanpowcr and 
Personnel. Joint Chiefs of Staff, asking for 19 positions on the 
Joint Duty A.s.signmcnt List. This request is being held pending 
further review of the Joint Duty Assignment List and processes 
involved. Joint duty assignments w'ithin the NRO would benefit 
the organization and the Services by providing superior talent to 
the NRO and officers with better understanding of satellite 
intelligence capabilities to the Services. 

(PCUO) The HRMG makes training available to the managers 
and supervisors of military personnel covering the different aspects 
of career management, evaluation.s. promotion and award 
recommendation sy.stcms. and disciplinary .sy.stcms. 
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(IJ) MONITOR 
SERVICE 


MILITARY PERSONNEL 


(P©W©) Wc found the NRO docs not maintain a process to 
ensure managers and supervisors understand the impacts of their 
actions regarding military personnel. The NRO docs not maintain 
policy on. or a system to track, who receives or needs this training. 

Interviews indicated senior management. HRMG 
official.s. and militiuy personnel as.signcd arc concerned about this 
issue. Some civilian supervisors do not clearly understand the 
needs of military personnel regarding performance appraisals and 
awards and decorations policy and proecdums. actions 
significantly impacting military careers and promotions. The 
HRMO .should develop and implement a jxrlicy on and a 
mechanism to track training provided to supervisors of military 
personnel on military personnel management matters. 

) The NRO does not maintain a procc-ss to evaluate or 
monitor the quality of services provided to military personnel 
assigned to the NRO. Establishing such processes or methods 
would provide several benefits to the NRO. First, they would 
provide a basis for determining the staffing needs of the .VIPD. 
Second, they would provide a basis for knowing when and what 
changes arc needed in the MOU.VMOAs with the scr\’iccs. Third, 
they Wuld provide a ba,sis for determining information needed by 
non-military supcrvi.sors or military supervi.sors of other services. 
The HRMG .should develop and implement a process to monitor 
the quality of .services provided NRO military personnel by the 
.VtPD and Military Services. 
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LOGISTICS & SUPPLY 

(U) LOGISTICS AND SUPPLY 


(lit BACKGROUND 


(U) We define logistics and supply management as the storage, 
distribution, procurement, maintenance, transportation, facilities, 
communications. data processing. property disposal, 
accountability, and personnel u.scd to .suppon or manage support to 
the organization. An adequate program ensures logistical and 
supply support requirements arc fulfilled in the requested time 
frame and at the expected costs. It also contains a mcchani.sm to 
ensure accountability for that propeny and equipment. 


4&A) The MS&O provides logistical support to the NRO 
headquaners facilities through the Facilities S uppon Group and the 
Prooenv Manaaemeni Office. The NRO 


(b)(1)(c) (b)(3) 10 use 

424 


ISSUE: The NRO logistics and supply management system is generally 
adequate; however, it lacks a property accountability system and has some shortcomings 
in verification of GSA Fleet Vehicle credit card charges. 


(II) ROLES AND 
RESPONSIBILITIES 


^Si*) Roles and responsibilities arc adequately defined in 
standard operations procedures, position descriptions, statements 
of work with the contractor, and stuff meetings. They are also 
defined in publications such as Integrated" Logistics Plans. 
Operating Instructions. Custom er Support Manu'iils. and the 

& Computer Supplies Manual, 


(b)(1)(c) (b)(3) 10 use 424 


t^) The Facilities Suppon Group is resp onsible for all 
logistics planning and suopon for NRO activities 


OSD-(b)(1) EO 
13526 Section 


_ Most supportrcuuirements arc provided through 

contracted services withQ^^Q as the NRO's prime contractor. 


(STfT) The Propeny Management Office controls and manages 
Government Furnished Equipment and Contractor Acquired 
Propeny. This respon sibility includ es acquisitio n, redistribution. 
and dispo.sal authority. 


OSD-(b)(1) 
EO 13526 
Section 3.3(1) 
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LOGISTICS A SUPPLY 


OSD - (b)(1) EO 13526 Section 3.3(1) 

■ 

■ 

_ i 



(U) REQUIREMENTS 
IDENTIFICATION 
AND FULFILLMENT 


(U) Logistical and 
Supply Support 
Requirements 




OSD - (b)(1) EO 13526 Section 3.3(1) 


(U) Transportation 
Requirements 


■ (FOUO) The need for official business ground transportation is 
met through a fleet of General Services Administration (GSA)- 
leased vehicles. Employees reserve vehicles through an on-line 
system, A rental agrcement. the keys and a GSA Fleet Credit Card 
for gasoline purchases arc picked up from the Logistics Officer, 
Current and ending odometer readings are noted, along with fuel 
status. Credit receipts arc turned in with the keys at the 
completion of the trip. The credit card receipts are collected and 
forwarded monthly to GSA, 


FINDING: The NRO does not have a mechanism to verify GSA Fleet Vehicle 
credit card charges. 


fPOTJO ) The NRO lea.ses approximately aa vehicles through 
the GSA. Interviews with personnel in charge of NRO vehicles 
indicated they do not verify credit card receipts. The responsible 
personnel collect and forward the credit card receipts once a month 
and annotate the ending mileage and other information for each 
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vehicle into an automated database system. There is no internal 
control in place to verily that credit cards are used in accordance 
with GSA rules and guidelines. 


(rOUO) RECOMMENDATION 24: The DNRO direct development and implementation 
of processes to verify credit card charges on GSA Fleet Vehicles. Actions to be completed 
by 1 October 1996. 


DNRO COMMENTS: 

Concur with caveat. While the NRO does not currently have a mechanism to verify 
GSA Fleet credit card charges, it has a comprehensive, automated database for tracking GSA 
Fleet Vehicle use. The NRO will review and modify as necessary its leased vehicle monitoring 
process, to include periodically verifying credit card use. Corrective action will he complete by 
7 October 1996. 


(Pmm EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. 


(FO t i e) RECOMMENDATION 25: The DNRO direct the NRO Inspector General to 
conduct an audit of the GSA Fleet Vehicle and credit card usage. The audit to be 
completed by 1 April 1997. 


(FOUO ) DNRO COMMENTS: 

Concur, NROIIG will audit GSA Fleet Vehicle and credit card use by 30 June 1997, 


EVALUATION OF MANAGEMENT COMMENTS: 

We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. Unless constrained by resources or priorities, the NRO/IG audit should he 
completed no later than I April 1997. 


(U) Responsiveness (0*) We interviewed personnel to determine if they received the 

to Needs required support in the requested time frames and at the expected 
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cost. Each person interviewed expressed a high degree of 
satisfaction regarding the support that is provided by the Facilities 
Support Group, as well as external support organizations. In 
ad^tion, we reviewed a listing which contained all of the requests 
for logistical and supply support services in FY 95 and found the 
requirements were fulfilled on or before the required time frame 
and at the expected cost. 


(POtJO) FINDING: The NRO does not have a property accountability program. 


(U) PROPERTY 
MANAGEMENT 


Lack of 

Published Property 

Management 

Procedures 


(U) No Property 
Book Account 
Established 


(FOUO ) The NRO docs not have a property accountability 
program because it lacks a published property management 
procedure, does not have an established property book account, 
and does not have a comprehensive Government Furnished 
Equipment and Contractor Acquired Property follow-up process. 
As a result of not having a precise count of NRO-owned as.sets. the 
NRO cannot accurately meet its reporting requirements to 
Congress. 


(£OUm The NRO does not have a published procedure to 
implement a property accountability sy.stcm. The March 1994 
draft MS&O Property Management Procedures Document has not 
been finalized and implemented. This document assigns 
responsibilities and defines criteria for property management and 
accountability. Only the Reviewing Officer and the Property 
Manager have been appointed, and this done verbally. 



(P©W) The NRO docs not have a property book account 
which would provide a physical record of all NRO as sets. In an 
effort to establish a property book, the contractor 

developed a database of all accountable property oh which they 
had a record back t o FY W . However this generally only includes 
property for which source of supply. There has 

not been a physicafrccohciliation of this listing and it does not 
include property which came under NRO's control as a result of 
the program consolidation. The contractor provides quarterly 
reports to the MS«feO from this data ba.se. 


The NRO excludes furniture and .safes fromthccuirent 
datable bceause they are not accountable property 

H owever for FY 95 alone the NKOapent 
approximate! furniture. The database also does 
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Inaccurate 
Database Used to 
Report to Congress 


(U) Accountability 
for Government 
Furnished 
Equipment and 
Contractor 
Acquired Property 


not include all NRO automated data processing equipment. The 
ITG maintains an inventory list of automated data processing 
equipment and was conducting a 100 percent physical inventory at 
the time of this inspection. However, no process exists to integrate 
this information into the MS&O accountability reports. 

The Chief Financial Officers Act and reporting 
requiremenLs mandated by the 0MB. the Department of Trca.sury, 
and the Congre.ss require agencies to maintain accurate inventory 
records. Since the NRO does not have a property accountability 
system and has not conducted a 100 percent physical inventory, it 
cannot accurately report on NRO-owned assets and is, therefore, 
not satisfying its reporting requirements. 

(9) We found the NRO Property Management Office maintains 
a well e.stablished process to identify and track Government 
Furnished Equipment and Contractor Acquired Property in 
accordance with the FAR. Part 45, However, we found the process 
to track disposition instructions for Government Furnished 
Equipment and Contractor Acquired Property lacks strong, timely 
follow-up action to en.sure contractors implement instructions. We 
reviewed Plant Clearance Reports for FY 92, 93, and 94 to 
determine how many cases were still open and the dollar value of 
equipment and property associated with those cases. The results of 
our review follow: 




EL T( 

92 

93 

94 

Jtal Cases_Open Cases _Open Case Value 1 

(b){1)(c) (b)(3) 10 use 424 


I 


( flECRET) 


If the Property Management Office does not follow-up with 
contractors regarding the disposition of government equipment, the 
government loses active use of both the equipment and the 
monetary value due to depreciation of those assets. It also creates 
an atmosphere conducive to lost visibility which easily results in 
the loss of the government’s property and equipment. 


RECOMMENDATION 26: The DNRO direct development and implementation 
of a property accountability system including physical inventory requirements and 
periodic reconciliation with property records. Actions to be completed by 31 March 1997. 


DNRO COMMENTS: 

Concur . A draft NRO Headquarters Facility Property Accountability plan is complete, 
and a 100% physical inventory wilt he scheduled once Westfields collocation is complete. 
Actions regarding this Recommendation will he complete 31 March 1997. 
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(rmO) E\'ALUAT10N OF DNRO COMMENTS: 

(TOTTO^ We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. 


RECOMMENDATION 27: The DNRO direct development and implementation 
of an effective Government Furnished Equipment and Contractor Acquired Property 
follovt-up system to ensure disposition instructions are carried out. Actions to be 
complete by I October 1996, 


(1WO) DNRO COMMENTS: 

(^nfTOi Concur. We judge the weakness in the follow-up system is that an inadecpiate number of 
people are available to perform follow-up actions. To better ensure property disposition 
instructions are carried out by its contractors, the NRO will increase the number of Plant 
Clearance Specialists from two to four. We expect to have new staff in place by 31 July 1996. 


i rwi? ; EVALUAnON of DNRO COMMENTS: 

Wc consider the proposed actions of the DNRO to be partially responsive to the 
Recommendation. The actions proposed by DNRO to increase the number of Plant Clearance 
Specialists will be helpful in facilitating property disposition follow-up. However, also needed is 
the implementation of a system to ensure follow-up on property disposition instructions. 
Implementation of this system is to be accomplished by I October 1996. 


(re CO ) RECOMMENDATION 28: The DNRO direct the NRO/IG to perform an audit of 
property accountability with specific focus on determining If accountable property can be 
located. Action to be completed by 1 October 1997. 


DNRO COMMENTS: 

Concur. NROIIG will audit property accountability by 30 June 1997. 


iPm^i EA ALUATIOS OF DNRO COMMENTS: 

iPUUUi We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. Actions to be completed by I October 1997. 
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(U) EQUAL EMPLOYMENT OPPORTUNITY PROGRAM 


(U) BACKGROUND (U) Executive Order 1I47K. S August 1969. requires the 

executive departments and agencies to "establish and maintain an 
affirmative program of equal employment opportunity for alt 
civilian employees...It states the EEO policy must be an 
integral part of all aspects of personnel policy and practice in the 
employment, development, advancement, and treatment of all 
Federal Government civilians. Agencies must provide sufficient 
resources to administer such programs and provide training and 
advice to managers and supervisors to assure their understanding 
and implementation of the policy. Agencies also must provide an 
internal system for periodically cviduaiing the eftcctivcncss of 
their program in meeting the Executive Order policy. 

(U) Title 29. Code of Federal Regulations (C.F.R.), Section 
1614. c.stablishcs the policy and responsibilities in fcdcrul agencies 
for implementing an affirmative employment program. It states 
each agency .shall: 

- Develop plans, procedures and regulations to cany out its 
program: 

Regularly appraise operations to assure conformity with 29 
C.F.R. 1614: 

Designate an EEO Director and diversity managers; 

- Make written materials available throughout the work 
place: 

- Ensure full cooperation by employees: and 

- Publicize and po.st names, phone numbers, and office 
addresses of EEO counselors. 

(U) DoDD 1440.1. 21 May 1987. established the Civilian 
Equal Employment Opportunity Program within DoD and 
prescribes implementing policies to include diversity in their 
affirmative action programs, consistent with guidance from the 
U.S. Equal Employment Opportunity Commission. Office of 
Personnel Management, and the DoD Human Goals Charter. 

(U) Likewise. DoDD 1350.2. 18 August 1995. expanded the 
EEO policy to military personnel and regulated the Military Equal 
Opportunity Program while c.stablishing DoD-wide standm-ds for 
discrimination complaint processing and rc.solution. It requires 
agencies to develop policies to prevent unlawful discrimination 
and sexual hara.ssmcnt and prominently post and enforce them, to 
provide qualified EEO counselors, and to cstabli.sh local hot 
lines/advicc lines to provide complaint processing information. 
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ISSUE: The NRO does not have an Equal Emplovment Opportunity Program. 


(U) POLICIES AND (POtTO) The NRO's primary EEO role is to act as a facilitator 

PROCBDURES between employees and parent organizations (CIA. Army. Navy 

and Air Force). Employees with EEO related issues may go 
directly to the parent organization or obtain information on where 
to go from the HRMG personnel officials. 


(T'WTO) FINDING: The NRO lacks an EEO program meeting employee needs in 
accordance with DoD and CIA requirements. 

The NRO docs not have an EEO program. Senior 
NRO management contends the EEO needs of all employees are 
adequately covered by the parent organizations and additional 
NRO resources in this area would be wasteful. Senior NRO 
managers also stated appropriate parent organization officials 
would be granted access into the hWO facilities to conduct any 
investigation or fact finding related to an EEO complaint. 
However, the current MOAs/MOU's do not address if or how this 
service would be provided or conducted. 

(FOUO) The absence of an EEO program placc.s the NRO in 
violation of DoDD 1440.1 and 1350.2. It is not a compelling 
argument to claim that NRO employees have the same 
opportunities as other DoD employees for EEO suppon. The .NRO 
docs not have a Director of EEO to bring discrimination and 
harassment issues to the attention of senior management nor 
diversity managers to publicize the contributions of minoritic.s. 
We judge NRO employees do not have ready access to the 
appropriate full range of EEO support required. 

(EOUA) Based on rcspon.ses to our employee opinion survey, 
wc found NRO employees do have EEO concerns needing NRO 
management attention. Survey responses indicate minorities and 
DoD civilians find the NRO deficient in providing a strong 
commitment to EEO efforts and in being treated fairly for 
promotions and assignment.s. The lack of an NRO EEO program 
has contributed to tlic employee perceptions cited below. 

Interviews with NRO employees revealed they had inaccurate 
or incomplete information about their EEO responsibilities. Wc 
attribute this, in part, to the lack of readily available information 
on EEO for NRO employees. Employees interviewed were 
unclear if the NRO had an EEO policy as they had not seen any 
EEO information publi.shcd or posted on bulletin boards. 
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Survey 

Response*^ 


Personnel practices 
demonstrate a strong 
commitment to creating 
and maintaining an 
effective culturally 
diverse work force. 

All NRO 

Minority 

DoD Civ 

agree 

21 disagree 

4991- agree 

29%- disagree 
agree 

3395: disagree 

People in the NRO arc 
treated fairly 
regarding promotions. 

All NRO 

Front Off 

Minority 

DoD Civ 

5K9r agree 

2 We disagree 

43*1" agree 

339f disagree 

4S95: agree 

2795: disagree 

3395: agree 

4495: disagree 

People in the NRO are 
treated fairly 
regarding assignments. 

All NRO 

Minority 

DoD Civ 

60% agree 

20% disagree 

54% agree 

249c disagree 

44% agree 

2Wc disagree 

* Neutral responses not rcncctcd. 




We found the NRO made an effort to augment employee EEO 
training provided by the parent organizatiom*. HRMG personnel 
stated EEO training, including sexual harassment prevention 
training, was accomplished NRO-widc in-house, with training 
meeting the guidelines of the parent organiztitions. However, 
inspection of training records showed no record of completion. 

We found the NRO maintains no processes or mechanisms to 
monitor the effectiveness of EEO policies. HRMG officials stated 
the NRO has not established a mechanism to track EEO employee 
complaint data. While the parent organizations maintain this, they 
arc not provided to HRMG without a specific request. Without a 
formal monitoring mechanism NRO management is unable to 
determine, assess, or report the ctYcctivencss of the EEO support 
provided by the parent organizations or their internal training. 
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( f » O t ?0 ) RECOMMENDATION 29: The DNRO direct development and implementation 
of an NRO EEO program in full compliance with DoD Directives 1440.1 and 1350.2 and 
applicable CIA requirements. Actions to be completed by 29 November 1996. 


DNRO COMMENTS: 

Concur. A chief for the new NRO EEO Office will be identified by SI May IW6. and 
an NRO EEO Program should he fully implemented by 29 November 1996. 


IPmO) EVALUATION OF DNRO COMMENTS: 

(Ji^U£>) V/e consider the propo.sed actions of the DNRO to he responsive to the 
Recommendation. 
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(U) SECURITY 


(U) BACKGROUND (U) Organizations should base good security environments on 

well defined security fwlicies and procedures, roles and 
rc.sponsibilitics. and oversight mechanisms at each level of the 
organization. To be thorough the program should addrcss core 
disciplines of physical security, personnel security, information 
security, communications security, and operations security. 
Depending on the organization, the disciplines of industrial 
security and AIS security may be added. Because of the extensive 
u.sc of AIS within the NRO. we address AIS security in the 
following section of the report, 

(U) DCl Security (U) The NRO follows DCI security policy and guidance "to 

Policy Followed maintain a uniform system in the whole National Reconnaissance 

Program area" as stipulated in the Agreement For Reorganization 
of the National Reconnaissance Program, dated 11 August 1965. 
between the DCI and the DEPSECDEF. This agreement follows 
the provisions of the National Security Act of 1947. which 
establishes the responsibility of the DCI for protection of 
intelligence sources and methods. Therefore, the NRO uses the 
following DCIDs as the ba.sis for security policies and guidance; 

• DCID 1/7: Security Controls on the Dissemination of 

Intelligence Information 

DCID 1/14: Personal Security Standards and Procedures 
Governing Eligibility for Access to Sensitive 
Companmented Information 

- DCID 1/16 Security Policy for Protection of Intelligence 
Information Systems and .Networks 

- DCID 1/19 Security Policy for Scn.sitive 

’ Compartmenicd Information 

- DCID 1/20 Security Policy Concerning Travel and 

A.ssignment of Personnel with Access to Sensitive 

Companmented Information 

- DCID 1/21 U.S. Intelligence Community Physical 

Security Standard.s for Sensitive Compartment Information 
Facilities 

- DCID 1/22 Technical Surveillance Countermeasures 


fSmi The NRO uses the T ALENT-KEYHOLE and RYF.MAN 
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OSD - (b)(1) EO 13526 Section 3.3(1) 


(U) NRO Security 
Staff Structure 


tSiift') The NRO security staff structune ha.s changed 
significantly over the last several years. The l9Sy restrucrure 
study determined security management was fragmented and 
uncoordinated with the separate program offices Derating in a 
highly compartmented and segregated manner. The program 
.security offices provided conflicting, inconsistent, and risk 
uvoidancc-ba.scd guidance. As a result of this and other security 
management reviews, the NRO moved away from risk avoidance, 
a high cost approach, to a practical, cost-saving, and cover- 
enhancing philosophy of risk management. In conjunction with 
this philosophy, the NRO reduced the multi-companmcntcd 
information access structure to a simplified BYEMAN 
compartment in February 1994. 


rsm) The NRO intended the restructure to provide common 
security support services to all part.s^of the NRO. includinii 
novernment and contractor onerations. 


OSD-(b)(1) EO 13526 
Section 3.3(1) 






t^) The Director of the Office of Security (DOS) provides the 
N'RO core corporate level security services. Under the Director. 
the Deputy DOS suDcrvi.scs the Deputy Director for Security 


1(b)(1)(c) (b)(3) 10 use 424 



_ _ __ liese offices 

serve as NRO focal points to external government security policy 
makers. 


^ The three directorates and major offices under the D.NRO 
each maintain separate security staffs. The Program Security 
Chiefs of these slot’s report to the head of the directorate or office 
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and not to the DOS. The security stat'fs implement the corporate 
level security policies and procedures, develop dircctoratc/officc 
level security polices and procedures, and provide primary security 
direction and oversight of the various programs and projects for 
both government and contractor personnel and facilities. They 
also serve as the dircctoratcyoffice focal point for interfacing with 
the Office of Security. 

(U) The NRO leadership proudly .states it maintains a very 
dose working relationship, more like a partnership, with its 
contractor base regarding security. The NRO involves contractor 
rcprescntaiive.s in deterrnining the impact of proposed changes to 
security requirements in order to manage costs while achieving 
necessary security. 


( POUO l ISSUE: The NRO has adequate processes to manage security requirements: 
however, mechanisms used to provide basic security policy guidance, establish 
responsibilities, and monitor performance need significant improvement. 


(11) POLICIES AM) 
PROCEDURES 

(II) Basic Policy 


(S«) BYEM.4N 
Manual 


(II) Flexibility Key 
at Sites 


The NRO cites several types of documents for 
c.stablishing security policies and procedures as well as providing 
direction and guidance to government employees and conlracton>. 




At 


(b)(1)(c) (b) 


_ sites, the NRO relies on some security 

policies and procedures, atid in many eases on the services, of the 
local security officials which provide cover. Because of this, the 
NRO must be tlexiblc in external facility security requirements. 
The NRO depends on MOU/MOAs. as well as close working 
relationships, for security arrangements at several sUcs^Joim^ 
•Staffed by the NRO and l.. 


(b)(1)(c) (b)(3) louse 424 


tStHB) The NRO policy determination process incoiporaics 
input from employees, contractors, the Office of Security, and 
directorate and senior NRO management through the DOS Senior 
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(U) Team 
Perspective 


SECURm’ 


OSD ' {b)(1) EO 13526 Section 3.3(1) 



(II) FINDING: Corporate security policies and procedures are not clearly defined and do 
not provide a sound basis on which to establish roles and responsibilities. 


(C) CONFLICTING 
GUIDANCE 


W) BYEMAN 
Manual 

Applicability Not 
Clear 


' (E p tfi i ) Wc found confusion about the currency and applicubility 
of the NRO/NRP Directives regarding security. The NRO 
provided them as being current and wc confirmed this through 
other offices. However, the Office of Security stated three of them 
were superseded by other guidance and none of them were widely 
available. The Dircctivc.s conflicted with NRO Security Policy 
Dirartives and Noticc.s and the BSM. Numerous classification 
guides in varying stages of update provide fertile ground for 
confusion on whether material is Sensitive Compartmcnicd 
Information (SCI) or not and what level of classification applies. 
No clear policy or procedure exists to determine document 
supersc.ssion or precedence. 



(U) Complex 
Classification Guide 
System 


(Brfl) The NRO moved from a system with multiple 
companmciitcd information systems to an overall .single 
BYEMAN compartment in February 1994. The NRO should be 
recognized for making significant advances in reducing 
infomation cotnpanmcniation and increasing dissemination of 
information since that time. However, signitkani opportunity for 
funher progress lies ahead. 


(#*) The NRO publishes multiple classification guides: the 
NRO Classification Guide, directorate level Security Classification 
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(U) Over- 
Classification and 
Compart mentation 


(b)(1)(c) 


G ukIcs. and Special Classification Guides for 

material. For NRO personnel and contractors with 
wider access, the current system is confusing, contribut c.s to 
information over-classification, and lost productivity. 




OSD - (b)(1) EO 13526 Section 3.3(1) 
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(P©©©) The majority of documents we reviewed lacked 
declassification instructions. We judged this resulted from the 
highly .scn.sitivc nature of the information, where people inferred 
declassification unlikely or found it difficult to determine, and a 
lack of management attention. Presidential Executive Order 
12958. Classification and Protection of .National Security 
Information, requires the NRO to determine declassification needs 
on an extremely large amount of classified material, with a 
significant amount over or approaching the timelines for required 
review/dccIa.ssification. In November 1995. the DNRO 
established the Information Decla.ssification Review Center to 
develop a systematic method of addressing this issue. 

(9!!©) The over-classification and compartmentation listed 
above inhibits needed free flow communication between the NRO 
and activities needing information from the NRO. Interviews 
conducted with senior DoD. CIA. and NRO officials revealed 
indications the NRO sometimes u.ses security classifications as a 
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policy tool, rather than a protection mechanism. We found one 
case where the NRO inhibited information sharing on modeling 
and simulation sy.stcms with other DoD agencies "by use of the 
B’^'EMAN caveat. 


(S®) Decisive 
BYEMAN Definition 
Needed 


fS*) A method of clearly defining BYEMAN material docs 
not exist. In 1992. the ClA/'lG and NRO^IG Joint In.spcction of 
BYEMAN Security Management pointed out "an urgent need" for 
a definition of BYEMAN. The DCI directed a study"and the NRO 
published it as "NRO Protection Review 'What i.s BYEMAN’" in 
November 1992. The .study concluded less information must 
reside in the BYEMAN Control System, but does not provide a 


OSD-(b)(1) EO 


methodology to achieve this goal. _ 

used to define BYEMAN material. They include: 


Itraditionallv 


OSD - (b)(1) EO 13526 Section 3.3(1) 


Applying thc.se criteria to documents we reviewed, we determined 
a significant number did not meet the compartmentation criteria. 


(U) No Systematic 
Document Change 
Process or 
Supersession System 


No consistent procc.ss exists for formalizing changes to 
NRO security documents, for communicating these changes to the 
NRO ajid contractor personnel, or to ensure changes become 
effective. The 1992 ClA/IG and NRO/IG Joint Inspection of 
BYEMAN Security Management made a similar finding. Their 
finding focused on establishing and staffing an office to centralize 
planning and coordinate security policy changes. Despite this, the 
NRO docs not have <ui established supersession or precedence 
system in effect so personnel can determine the current, valid 
guidance. In November 1995. the DNRO created the Information 
Management Group and charged them with developing a 
mechanism to provide this guidance for the organization. 


(U) Lack of 
.Available Security 
Documentation 


- (b)(1) EO 13526 Section 3.3(1) 
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OSD - (b)(1) EO 13526 Section 3.3(1) 


(L') Memoranda of 
Understanding & 
Agreement 
Clarification 


( TOUQ ) The NRO needs to ensure development and 
implementation of clear and specific MOU'MOA for .security 
management at ground stations jointly operated with other 
agencies. One team member found problems previously occurred 
with access rights of non-NRO personnel needing to conduct 
required activities. The team also determined significant 
operational security differences arose between the NRO and 
another agency regarding information, facility, and equipment 
access at another location. To avoid such security issues. 
MOU/MOA documents must clearly define the policies and 
procedures, roles and responsibilities, and methods all involved 
organizations will use to ensure appropriate security. 


RECOMMENDATION 30: The DNRO direct development and implementation 
of a process to provide NRO employees access to a complete and current set of security 
policy documents and an appropriate sub-set of these to contractors. Actions to be 
completed by 30 November 1^6. 


DNRO COMMENTS: 

Concur. Recommendation 30 h accepted and has been accomplished. All .security 
reference materials (DClDs, E.xecutive Orders, NRO Classification Guides, etc.) are available to 
NRO personnel and internal contractors on the NRO nenvork in an application entitled 
STARgazer. To ensure that the STARgazer remains current, the NRO will prepare and 
implement a process to ensure periodic review of the security documents. This procedure will be 
implemented by 30 November 1996. 


( POVO) EVALUATION OF DNRO COMMENTS: 

tTOffO) We consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 


( rOl g O) RECOMMENDATION 31: The DNRO direct a complete review and revision of 
current NRP/NRO security documentation for consistency of policy and clarity of 
applicability. Actions to be completed by I September 1996. 
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ff> WO ) DNRO COMMENTS: 

Recommendation 31 is accepted and has been accomplished. Changes resulting from 
the NRO Declassification Review and E.u‘cutive Orders impacting classification, 
declassification, and requirements for access to classified information have been incorporated 
into appropriate notification and training for NRO per.%onnel. Director. NRO Security-, 
distributed a 19 April 1996 memorandum to all NRO Security personnel highlighting current 
authorities that formally supersede historical security notices and procedures (identified as NRP 
Directives 1. 4. and 5) noted in the report. 


( fOOO i EVALUATION OF DNRO COMMENTS: 

consider the actions taken by the DNRO to be responsive to the Recommendation. 


(POUO) RECOMMENDATION 32: The DNRO direct development and implementation 
of a systematic process of NRO document management. Actions to be completed bv 31 
August 1996. 


DNRO COMMENTS: 

Concur, The NRO's Management Services and Operations (MS&O) is developing a 
document management system. This system will he administered by MSAO's Information 
Management Group and will he implemented by .11 July 1996. 


(f^m) EVALUATION OF DNRO COMMENTS: 

\Ne consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 


(SW) RECOMMENDATION 33: The DNRO propose, coordinate, and implement clear 
policy on how to distinguish BYEMAN information from other SCI and collateral classified 
information. Actions to be completed by 1 June 1997. 


DNRO COMMENTS: 

fSWj Concur. A recently developed NRO .sponsored classification methodology known as the 
Decision Tool, has become the standard for use in reaching classification guide evaluations. 
This Decision Tool and the resulting classification review of all NRO program information will 
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provide the basis for clear written policy defining what constitutes BYEMAN information. 
Implementation of the revised clas.dfication policy requires review and update of each NRO 
program's classification guide. Because these guides are contractual requirements, their change 
requires contractual modifications which may include contract cost increases. Because full 
implementation of this Recommendation cannot be claimed until appropriate contractual 
modifications are in place, the target completion date for this Recommendation is June 1997. 


(fOUO ) EVALUATION OF DNRO COMMENTS: 


VV<? consider the proposed actions of the DNRO to be partially rcspon.m‘e to the 


Recommendation. 


fOSD - (b)(1) EO 13526 Section 3.3(1) 



(11) ROLES AND 
RESPONSIBILITIES 


(11) Office Of 
Security 


(U) Overall, wc found well-trained and motivated security 
personnel. Their abilities and wealth of security experience, 
combined with the flexibility of NRO. make the system work 
dc.spite the noted deficiencies. Simihu’ to the other functional 
areas, wc found personnel focu.sed on meeting organizational 
mission end-goals of timely acquisition, launch, and operation of 
.satellites. 

i#) A DNRO memorandum. Restructure of National 
Rcconnais.sancc Office Security, dated 5 September 1995. .<^cifie.s 
the duties and reporting chain of primary Office of Security 
personnel as well as the divisions and branches within the office. 
The duties .specified cover all the .security disciplines mentioned 
above. The memorandum specifically tasks the DOS to: 

- Serve as principal .security advisor to the DNRO; 

- Chair the NRO Security Panel: 

Represent the DNl^O on the U.S. Security Policy Board's 
Policy Integration Committee; and 

• Orchestrate, in concert with program directors, consistent 
.security policy, planning, and implementation throughout 
the NRO. 


^ The memorandum also authorizes the DOS to reorganize 
the office as necessary, excepting for program security staffs, to 
better .serve the NRO needs. Funher, it eliminates the position of 
Director of the NRO Security Center in favor of the position of 
Deputy Director of Security, Wc found this action al.so di.s.solvcd 
the former NRO Security Center, but kept the divisional 
rc.sponsibiIities as dc.scribcd in the background information. 
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(U) Program 
Security Staffs 


(U) Security 
Awareness Forums 


SECURITY 


) The DNRO memorandum specifics program security 
staffs report directly to their program directors and provide the 
programs multi-disciplinary security policy guidance and support 
services. In addition, it charges the program .security staffs with 
justifying, staffing, and training their .security personnel to ensure 
consistent NRO security policy implementation. A review of the 
program security staffs indicated they provide security guidance 
covering all the security di.sciplincs mentioned above. 


rs) The DNRO memorandum establishes the purpose and 
membership of the NRO Security Panel. This panel formulates, 
coordinates, and promulgates security policies relevant to NRO 
programs. The NRO Security Panel includes observer membership 
jTomtheJ^JPolicvBom^tafMh^^SA. the CIO. and the CIA 

Meetings are also open to 

ouic^creonncnvithin the NRO. 


To facilitate resolution of security policy and 
implementation issues, the DOS formed the DOS Senior 
Management Group, which opcratc.s as a working group to staff 
security issues. It includes most of the same people of the NRO 
Security Panel plus representatives of the Deputy Director for 
Security Policy and Operational Suppon branches, but excludes 
the external organization representatives. 



■|^|5|oSD - (b)(1) EO 13526 Section 3.3(1 ) I 
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(U) The Office of Security publi.shes a monthly newsletter to 
help keep employees informed of security procedures and their 
responsibilities. They provide employees the NTIO Security 
Reference Guide in softcopy on the GWAN to assist them in 
determining where to go with .security t|ucstions. This guide li.sts 
numerous .subject areas along with a focal point for questions. 
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(FQi)0) FINDING: The NRO security guidance is not readily available and lacks clear 
applicability to government employees so they can determine their roles and 
responsibilities. 


The BSM docs not clearly apply to government 
personnel and facilities. Due to the lack of clarity in the BSM and 
conflicting guidance provided by other security documents, 
government personnel lack clearly documented and defined 
security responsibilities. 

(FOU©) We found no consistent process of communicating 
security roles and responsibilities to the personnel of the Office of 
Security, program security staffs, and personnel of the NRO. 
While the September 1995 DNRO memorandum provided clear 
and consistent overarching guidance to the Office of Security and 
program security staffs, below this level we found varying degrees 
of specificity. Some elements of the Office of Security maintain 
extremely well-developed Operating Instructions for reference by 
their personnel which clearly define lower level policy, 
procedures, roles, and responsibilities: other elements do not 
maintain similar documented sources. 



(rOUO) RECOMMENDATION 34: The DNRO direct development and implementation 
of clearly deflned roles and responsibilities for NRO security personnel and NRO 
employees. Actions to be completed by I December 1996. 


( POim DNRO COMMENTS: 

Concur with caveat. While not formally (locumented, NRO personnel are taught their 
responsihiiities in security briefings, training cla,sses. anti security awareness efforts. 


pSD - (b)(1) EO 13526 Section 3.3(1) 


EVALUATION OF DNRO COMMENTS: 

IVV consider the proposed actions by the DNRO to be responsive to the 
Recommendation. 
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(U) MONITORING (jBOWttThe DOS employs various mechanisms to monitor the 

MECHANISMS security provided so that security practices remain current, achieve 

the desired goals and objectives, and focus on meeting the NRO 
mission. 

( rOUO ) The September 1995 DNRO Memorandum charges 
the DOS with reviewing and assessing security procedures and 
personnel resources necessary to implement security policies 
throughout the NRO. It further charges the DOS with providing 
NRO program Directors with annual assessments of .security 
programs implemented by their security chiefs. As this is a recent 
requirement, we could not determine the effectiveness of this 
mechanism. 

( P OUO ) The DOS established a schedule of semi-annual 
formal reviews of the directorate security phms developed, 
implemented, and maintained for their programs and projects. 
These include accomplishments, specific goals and initiatives for 
the following year, security enhancements, cost-saving proposals 
and pertinent management issues. In addition, the DOS initiated 
presentations by " the various prime contractor security 
rcpre.scntatives to brief program specific activities from the 
contractor perspective. 



(FOW) FINDING: The DOS and Directorates do not routinely use a system of 
performance measures on which to base decisions and changes to security policy. 


(ift) Corporate security managers indicated tliey provide 
oversight of their rc.spcctlvc areas by exception. Nearly all 
managers interviewed .stated they empower their employees to 
perform and employees inform them if a problem c-vists. Outside 
of the Personnel Security Division, we found very few managers 
use performance indicator data from subordinate work centers on 
which to base dcci.sions. The security personnel at all levels lack 
the type of performance measures necessary to fulfill an adequate 
IMC program, adequate oversight program, or future 
organizational needs to meet GPRA rcquiiements. 
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(FOUO ) RECOMMENDATION 35; The DNRO direct development and implementation 
of security performance measurements for security management functions that meet the 
needs of an adequate IMC program and will meet GPRA requirements. Actions to be 
completed by 1 October 1996. 


DNRO COMMENTS: 

Concur. NRO Security will develop an IMC plan which incorporates performance 
measurements as a key tenet. This plan will be in place by 1 October 1996. NRO Security will 
establish a working group to address security violation and incident reporting deficiencies noted 
in the report. The targeted date for completion of this task is 31 December 1996. 


EVALUATION OF DNRO COMMENTS: 

VVr cotisider the proposed actions by the DNRO to he partially responsive to the 
Recommendation. The performance measurements developed from this Recommendation should 
be in support of the corporate wide performance measurements to be developed in accordance 
with Recommendation 9. 
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(U) AUTOMATED INFORMATION SYSTEM (AIS) SECURITY 


OJ) BACKGROUND 


(U) Due to the pervasiveness of automated information system 
integration in this highly classified environment, we evaluated AIS 
.security separately from the other .security disciplines. 

(U) The Computer Security Act of 1987 (PL l(K)-235) 
miuidates Government-wide computer security; .security training 
for all persons who arc involved in the management, operation, 
and use of Federal computer .systems: and. assures the co.st- 
cffcctivc security and privacy of sensitive information in Federal 
computer systems. DCID 1'16. Security Policy for Uniform 
Protection of Intelligence Proccs.sed in Automated Information 
Systems (AlSs) and Networks, dated 19 July 1988. assigns policy, 
execution roles and rcspon.sibilities. and establishes a procedural 
framework for implementation of AIS security. Tlie Security 
Manual for Uniform Protection of Intelligence Processed in 
Automated Information Systems and Networks, a supplement to 
DCID 1/16. provides more specific guidance. 

(U) The NRO uses, and assisted in development of. the 
Intelligence Community's Automated Information Systems 
Security Manual (AJSSM) 200. dated 18 February 1994. They 
also use. and assisted in development of. the National Industrial 
Security Program Operating Manual Supplement, dated 1 February 
1995. These documents provide guidance for many areas 
including AIS security. 


Security policy and practices for AISs and networks is 
continually changing to keep pace witJi evolving technology. 
When DCID 1/16 was written, most AIS security felines 
addressed large mainframe computers which were just entering the 
networked arena. The ever-changing AIS environment requires 
vigilant management to cn.surc adequate security is maintained and 
intelligence information is protected. Because many of the 
national level policies do not reflect current technology practices, 
it is essential an organization be proactive in developing and 
executing its AIS .security programs. Today, each IntcUigence 
Community organization has its own internal local and wide area 
networks, in addition to connections with other Intelligence 
Community networks. They arc also electronically connected to 
their supporting contractors and customers. Software development 
has also evolved from each organization contracting for their own 
unique applications to using primarily commercial- or 
government-off-the-shelf, and now Internet-ready .software. 


tSi®) The NRO has been in the forefront of developing and 


using an extensive 


{b)(1)(c) (b) 


__ l .sccu rc netw ork. Their GWAN has 

ySiyH NRO connectivity with over user accounts. Limited 
network connectivity extends to the NR O's contractors over the 
eWAN which has approximately user accounts. 
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A/5 SECURITY 


fSt Computer security for the organiza tion is managed by the 

of the b/RO'.s Office of 
Sccunty^ThelTuof the Communications Directorate also has a 
security role in the development, operation, and maintenance of 
AISs. 


) ISSUE: The NRO has adequate processes and mechanisms to manage its AIS 
security program; however, the AIS security monitoring program needs improvement. 


(ID POLICIES AND 
PROCEDURES 


(ID Processes and 
mechanisms are 
adequate. 


(U) AIS security policy lays the foundation for determining 
what technical and non-technicai processes and mechanisms are 
needed to protect AISs. NRO uses DCID 1.16 as their ba-scline for 
developing NRO AIS .security procc.sses and mechanisms. The 
NRO developed the AIS Security Plan to specify the technical and 
non-technical information requirements which must be used in 
securing accreditation for AISs and networks. The AlS Security 
Plan i-S documented in the AISSM 2(X) for NRO sponsored 
government and contractor AIS systems. 

T8) The NRO installed limited Internet access but has not 
developed adequate policy and procedure incorporating 
appropriate security considerations. Access to the Interact 
provides a security challenge to the NRO. The desire by NRO 
managers for Internet connectivity was implemented using the 
only secure technical solution available at this time—physical 
separation between the NRO networks and the Internet. An NRO 
Internet policy has been propo,scd. but requires testing, 
coordination, staffing, and approval. With the changes undenvuy 
in security implementation practices by the*" Intelligence 
Community and the development of new offensive and defensive 
security technologies, the NRO is concerned insufficient time is 
being allowed to plan and implement proper security measures. 
The problem, especially for highly secure systems .such as the 
NRO's. is that technological improvements develop faster than 
policies and procedures can be drafted, tested, and implemented to 
encompass them. The NEO Security Panel should develop an 
NRO Internet Access Security Policy which describes conditions 
for approval of access, specific security protections, and 
monitoring mechanisms such as capability to relate usage and type 
to the user. 

The NRO has adequate proccsse.s and mechanisms in 
place to perform AIS security. The .NRO has established and 
achieved their AIS security goals of data confidentiality, data 
integrity, and system survivability. 

fS) The NRO has implemented restricted accc.ss controls to the 
GWAN. All network connections arc password protected. 
OWAN access is managed by the local ITG detachment and 
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centrally reviewed by the ITG's Network Operations Division. In 
addition, various networks arc isolated by filtering unique 
addrc.sscs or data formats to determine who or what data is allowed 
to traverse those networks. 

The NRO implemented a log-on identification and 
authentication too! on the NeXT workstations and on their DOS- 
based systems that connect to the GW AN. Networked systems 
lock the screen while not in use and require another authentication 
prior to unlocking the screen. Funhcrmorc. many applications 
have their own identification and authentication process, creating 
another layer of security. 

(Si The NRO installed AIS technical security .systems, 
firewalls and guard systems, to provide .secure connectivity 
between their GWAN and the contractor CWAN and the GWAN 
and their Intelligence Community links. The NRO docimicmed 
their use of firewall technology via a technical paper and in the 
required AIS Security Plan. 

AIS security analysis is an integral pan of the project 
planning and configuration management processes used 
throughout the NRO. AIS project plans document specific 
configurations of routers, bridges and filters to ensure the security 
of the network, Thc.se project plans arc reviewed at CCBs and 
undergo operational testing to ensure viability of the system. This 
front-end planning and coordination allows security i.ssucs to be 
resolved prior to hardware and software being introduced into an 
operational configuration. 


jOSD-(b)(1) EO^ 
13526 Section 
3.3(1) 


(l:) roles and 

RESPONSIBILITIES 


The NRO components have resident AIS security 
representatives. Each of the major contractors has a specified AIS 
security rcprc.scntaiivc as well. To increa.se security program 
effectiveness, these program and contractor Information Systems 
Security Rcprc.scntativcs complete an NRO training course and 
then are empowered to manage on-site AIS security and prepare 
security documents. The AISSM 2(K) and the National Industrial 
Security Program Operating Manual described these duties. 


(9i^) While the 

the Office of Security retains responsibility for centralized AIS 
accreditation oversight, the Information Sy.stems Security 
Renresenta tives have A lSjCcrtifi cation authori t^onhei^amo^ 
yoeram. 
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^ FINDING: The roles and responsibilities for AIS security are not clearly defined for the 
Office of Security, the ITG, and the remote sites. 


Both the Office of Security and the ITG have mission and 
functions documents which indicate responsibilities tor AIS 
security, but the clear delineation of what is an Office of Security 
function and what is an ITG function is not apparent. In fact, most 
projects will be impacted by both the program and policy functions 
of the Office of Security and the development, operation and 
maintenance functions of the ITG. Management in both offices 
admitted that better definition of responsible areas was needed. 
Customers are not fully aware of the separation of responsibilities 
cither. 



fS) The pervasiveness of AIS security in the planning process 
ensures that proper measures arc incorporated: however, the 
current ambiguity of responsibilities between the Otficc of 
Security. ITG. and the remote sites increases confusion and 
degrades timeliness in resolving security-related is.sucs. . 


RECOMMENDATION 36: The DNRO direct develo pment and imolemeniatinn of 

clearly defined responsibilities for the DOS, the ITG,_ 

regarding AIS security. Actions to be completed by 1 October 1996. 


OSD - (b)(1) EO 13526 Section 


rmW) DNRO COMMENTS: 

Concur, NRO Securify supports the need to review and resolve overlapping and often 
conflicting areas of responsibility. Representatives from NRO Security and NRO Information 
Technology Group in the Communications Directorate formed a working group which has been 
meeting for the past two months on a biweekly basis. This group is re,Kcarching authorities and 
addressing issues of overlapping interest. Furthermore, an Automated Information Svstem 
referent from Facilities and Information Security Division. NRO Security, has been assigned to 
the Program Security Officer in the Communications Directorate on a part time basis to assist in 
resolving these issues. A status report and recommendations for resolution of this item will be 
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provided hy / August 1996. Implementation of the I August 1996 rotes and responsibilities 
recommendations will be accomplished by 1 October 1996 


(rOUO) EVALUATION OF DNRO COMMENTS: 

mtfC) VVf consider the proposed actions hy the DNRO to be responsive to the 
Recommendation. 


FINDING: The NRO does not have an organization-wide program to monitor AIS 
security. 


(LI) MONITORING 


While some monitoring tools exist, there is no program 
which provides an organization-wide analysis of AIS security 
cffcctivenc,ss. The Office of Security centrally manages AIS 
accreditations but docs not have a consolidated record of the AlSs 
within their purview*. The DCID 1/16 requires the maintenance of 
records on each .system which indicate the classification level, 
compartments and Special Access Programs (if any), and identity 
of other connected systems. Delegating the accreditation authority 
to the site's Designated Approving Authority does not relieve the 
headquarters of the responsibility to maintain basic infonnation 
about their systems. 


•m 


(b)(1)(c) (b)(3) 10 use 424 


I of ITG has the capability 


to print a daily AIS usage report which they u.sc to monitor site 
license agreements. This tool, or something .similar, can be u.scd 
by the Office of Security to monitor AIS security violations, but a 
program for this is not currently in place. Responsibilities for AIS 
security monitoring of operational systems is an area that should 
be better defined in the above-noted suggc.stion on definition of 
roles and responsibilities. 


(P©W©) There is no consistent method for reporting AIS 
security violations to the Office of Security. Interview comments 
indicated components were unaware they had to report AIS 
security incidents. There must be .some way for the organization to 
receive and track security incidents. Without a standard system, 
the NRO cannot perform trend analysis and establish an accurate 
prioritized program for correcting deficiencies. 


(FOI O) RECOMMEND.4TION 37: The DNRO direct development and implementation 
of a comprehensive program for monitoring AIS security and identifying and correcting 
incidents. Actions to be completed by 30 June 1997. 
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DNRO COMMENTS: 

(9} Concur. Although no comprehensive program for monitoring AIS security presently exists, 
NRO Security currently audits selected systems. We are engaged in an ongoing study of 
intrusion detection within AIS as a precursor to the development of a wide area network 
capahility for audit. COMIITG, in conjunction with NRO Security, anticipates full 
implementation of the intrusion detection monitoring program hy 30 June 1997, This system will 
allow NRO security to Ixuh detect and correct AIS security incidents. 


(is^t^) evaluation of DNRO COMMENTS; 

Wf consider the proposed actions by the DNRO to be partially responsive to the 
Recommendation. The DNRO must also address the security auditing of the independent local 
area networks operating in the NRO. Actions to he completed by 31 June 199“, 
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OVERSIGHT 


(13) OVERSIGHT 


ISStlE: The NRO has adequate processes and mechanisms to measure the 
effectiveness and efficiency of direct mission related functions: however, the processes to 
measure the effectiveness of NRO administrative and support functions are inadequate. 
In addition, the NRO^G does not provide adequate oversight of the organization. 


(II) BACKGROUND (U) The NRO senior management emphasizes the delegation of 

responsibilities and authorities to the lowest practical level in the 
organization. This manugement practice requires supervisor},' 
accountability for achicving'goals and a set of controls or oversight 
mechanisms by senior management to assure that major 
organizational activities arc being successfully pursued. Principal 
administrative and support functions, no less than core mission 
• activities, require appropriate oversight. 

(U) To support .senior management oversight cffori.s. lower 
level components mu.st have processes to monitor the effectiveness 
of their activities and have measurable indicators of effectiveness. 


(II) MISSION 
OVERSIGHT 

(U) Oversight of the 
Systems 

Development and 
Acquisition Process. 


(U) Management oversight of the development and acquisition 
proces.scs requires an overlapping set of tools and mechanisms to 
a.s.sure the information on each program is complete, accurate, and 
timely, and the interrelationships among programs is clearly 
defined. In addition, there must be processes in place to use the 
information derived for proper oversight. 


(U) As the central focus of the NRO is the development and 
acquisition of satellite reconnaissance systems, NRO management 
has created oversight processes for activities directly concerned 
w'iih the accomplishment of these major missions. Many of these 
processes directly involve the DNRO and the senior management 
and are uniform across the entire NRO. Others have been created 
and implemented by the directorates and offices to support the 
higher level processes and to provide additional oversight as 
required for their specific mission. 


(|s6tJ©) The DNRO and senior program managers use several 
systems development and acquisition pr^’cs.s oversight procedures 
and mechanisms. All evidence indicates that they arc working 
well. Among the major oversight procc.ssc.s arc: a DNRO 
controlled computerized schedule of all programs: formalized 
agreements between the DNRO and senior program managers to 
nicct schedules and budgets; configuration control processes for all 
programs at all management levcl.s; and. a systems acquisition 
process overseen by the DNRO. 
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) The NRO has created and maintained a computerized 
Integrated Road Map to maintain oversight of the schedules and 
milestones for the numerous and complex systems development 
and technology programs underway. This road map also identifies 
interrelationships among programs. Oversight of these programs is 
maintained through the process whereby there arc no changes 
permitted to the Integrated Road Map. i.c.. the program .schedules 
and milc.stoncs. unless they have been fully discussed by the 
DNRO and all senior management and agreed to by the DNRO. 

Another tool used for providing senior management 
oversight of the systems development and acquisition processes is 
a baseline agreement, which .serves as a "contract" between the 
DNRO and the responsible .senior program manager for program 
delivery schedules, costs, and capabilities. Our"^ interview’"data 
indicates the ba.sclinc agreement procedure is working W'cH and 
adhered to by the parties concerned. It provides all employees and 
contractors involved in a program with clear guidance on what 
they arc responsible for and when. As an ovcr.sTght tool, it serves 
to augment the NRO Integrated Road Map. 

(TOUO) The CCB process is another oversight and systems 
development management tool. This process assures all .NRO 
components involved in the development of a system, as well as 
those components which have responsibility for interfacing with 
the system, have a voice in the .system specifications and all 
changes to it. and have the same documentation. System changes 
approved by a CCB which affect the baseline agreement, or^c 
NRO Integrated Road Map. come to the attention of the DNRO. 
NRO managers generally agree that the CCB proce.ss. although 
lime consuming and doeuWntation intensive, is essential In 
effectively overseeing the complex technology associated with 
space systems. 

(P©©®) CCBs oversee every major development program in 
the NRO and operate at all management levels. Typically meeting 
twice a month, at a directorate level the CCB is chaired by the 
Director and the membership consists of the Deputy Director, the 
group chiefs, the budget officer, the contracts officer, and the 
security officer. CCBs identify and maintain architectural, system 
development, integration, and operational standards: control 
changes to those standards; jind record or report the status of 
change implementation. The CCB cn.surcs that proposed changes 
to the program standards arc necessary and reflect a thorough 
consideration of all affected interfaces; represent a tradeoff among 
performance, cost, and schedule; and arc documented accurately. ~ 

(P©©^) Overall oversight of the acquisition process is 
accomplished through the NRO Acquisition Board, chaired by the 
DI^O. The inspection team Judged that this is a well structured, 
effective, mechanism for oversight. As discussed in prior sections 
of this report, the NRO Acquisition Board advises the DNRO on 
whether to continue the acquisition of a satellite sy.stcm at 
predetermined, key decision point.s. At each of these key decision 
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ADMINISTRATIVE 
AND SUPPORT 
FUNCTIONS 


OVERSIGHT 


points, the NRO Acquisition Board evaluates a number of critical 
elements about the program, including status, requirements 
validation, cost drivers, acquisition strategy, and alternative 
approaches, 

(FOUO ) Each of the senior managers below the directorate 
level has procedures for conducting oversight of the systems 
development and acquisition processes within their areas of 
responsibility. Some common practices used by most of them 
include: 

- Weekly meetings with division chiefs, contractors, and 
contracting officers to review program status, surface 
problems, and set priorities; 

- Monthly one-on-one meetings between senior manager and 
division chief to have candid exchange on program i.ssucs 
and agree on courses of action; 

- Monthly meetings with each division on program is.sucs 
and status and surface new technologies: 

Meetings, every 4 to 6 weeks, at a contractor's facility to 
get a first hand account of program status, and evaluate 
contractor performance; and 

- Ad hoc meetings with staff and other technical people to 
discuss alternative technical approaches and new 
technologies applicable for the program. 

(U) All senior managers interviewed used these oversight 
activities and made them an integral part of their management 
plan. These management oversight activities have been created at 
the initiative of the individual manager and implementation 
reflects their management philosophy. Senior managers believe 
this level of oversight is essential to properly manage their 
development and acquisition programs, remain knowledgeable 
about the status of each, and be comfortable they have a first hand 
view of the contractors’ progress. The inspection team concurs in 
this assessment. Much of the success the NRO achieved in 
building satellite systems can be attributed to this structured, 
manage^ment oversight process. 

(U) We examined the .NTlO’s monitoring of administrative and 
support functions in detail in other sections of this report. In this 
section, we summarize our principal findings and report them in 
the laiger context of senior management oversight of component 
monitoring efforts. 
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(EOW) FINDING: The NRO does not have systematic oversight processes for their 
administrative and support functions. 


(U) Information 

Resources 

.Management 


(FQUO ) The Deputy DNRO exercises senior management 
oversight for the Communications Directorate review of all 
telecommunications circuits used by the NRO. The 
Communications Directorate recently conducted this review to 
determine if the circuits are active or redundant and which 
organization-NRO or some other-they principally scrs'c. There 
arc potentially large savings for the NRO if redundant circuits are 
closed and other agencies pay a portion of the costs for the joint 
circuits used. MOAs. signed by the Deputy DNRO, will be 
required between the NRO and each of the agencies involved to 
document the cost-sharing formula. 


(tl) Logistics and IfiQUQ) We found aspects of the NRO logistics and supply 

Supply Management management processes to be inadequate, largely due to a luck of 

effective monitoring. There is no comprehensive property 
accountability system in place which would enable the NRO to 
accurately report to Congress on NRO-owned assets, and there is 
no process in place to assure that Government Furnished 
Equipment and Contractor Acquired Property arc disposed of 
according to direction. The NRO needs to regularly conduct a 
complete inventory of all properly in accordance with established 
government procedures and to reconcile the inventory with 
previous purchases. The process needs to be monitored and 
management oversight procedures instituted to assure compliance. 


(V) Contract (EOUA) We determined the N’RO lacks consistent procedures 

Management for as.suring interim monthly invoices for cost reimbursement 

contracts arc certified for technical performance by the responsible 
COTR. Contracting officers often certify interim invoices for 
technical performance without requisite technical knowledge to 
determine if the contractor has performed adequately. The NRO 
needs to implement a monitoring mechanism to assure documented 
COTR review of all contractor invoices. 


(L') Oversight of The NRO has a mixed record in managing customer 

Customer Feedback and user feedback. Feedback management is not part of the NRO 

corporate culture. Where customer feedback is properly collected 
and u.scd to improve customer serv ice, it is more by the initiative 
of individuals or components than by the plan of management. 

(POTJO) Cu.stomcrs in the Intelligence Community express 
satisfaction with the rcsponsivcnc.ss of the NRO to ad hoc ia.sking 
of operational saicllitc.s. Oversight of the NRO's responsiveness to 
ta.sking of operational satellites resides with both the Intelligence 
Community and the NRO managers of the mission ground stalion.s. 
There arc formal, but not documented, processes in'placc tor NRO 
to respond to such ia.sking. All members of the Intelligence 
Community participate in these processes. 
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4iSQUQ) Military users of the NRO products and services 
inform NRO components via message about quality, quantity, and 
timeliness of what is being provided along with comments and 
suggestions for improvements. The NRO has no processes in 
place to use this feedback systematically to improve service to the 
military users. 

(■FOllO) The NRO docs not have processes to obtain feedback 
from parent organizations on the quality or responsiveness of the 
personnel management service those organizations provide to their 
employees within the NRO. This limits the oversight the HRMG 
has of the support provided and inhibits asse.ssing when they 
should get involved to better support the employee. 

I 

(P©W©) There are no feedback mechanisms to senior NRO 
management for the tracking or evaluating of security incidents. 
The majority of NRO employees, including managers, did not 
know about the three levels of violations nor an NRO repon form. 
Wc found no consistent process of reporting violations that would 
facilitate data gathering for management oversight or developing 
performance indicators. 

(U) Oversight of We found the NRO has no oversight process to assure 

Support Agreements MOU/MOAs with other agencies are current, complete, and serve 

the interests of all parties. "Wc came upon cases, specifically in the 
areas of personnel support and security, where new MOU/MOAs 
need to be negotiated. 

(F*©©©) There are no MOU/MOAs between the NRO and the 
Navy. Army, or NSA which specify roles and responsibilities for 
those involved in providing or receiving personnel support. The 
1978 MOA with the Army addresses .support to officers: however, 
there arc no provisions for support to the Army enlisted pensonnel 
now present in the NRO. The NRO depends on the Military 
Services to provide services regarding professional military 
education, specific service skill training, drug testing, ethics 
training, etc. Current MOU/MOAs do not address these functions: 
they should be clearly defined in new MOU/MOAs. 

( FOUO ) The NRO needs to develop and implement ciciu’ 
MOU/MOAs for security management at ground stations jointly 
operated with other agencies. Wc found problems at ground 
stations over facility access rights of non-NRO personnel and 
operational security differences regarding information and 
equipment access. MOU/MOAs must clearly define the policies 
and procedures, roles and responsibilities, and methods all 
involved organizations will use to ensure appropriate security. 


(P©©©) RECOMMENDATION 38: The DNRO direct development and implementation 
of a plan for systematic oversight of administrative and support functions including 
performance measurements to meet the needs of an adequate Internal Management 
Control program and the GPRA. Actions to be completed by 1 February 1997. 
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( FOUO) DNRO COMMENTS: 

(FOm) Concur. The ADROM will develop a plan for systematic oversight to include 
definitions of roles and responsibilities; documentation of policies, procedures, and interagency 
agreements: and identification of relevant peiformance measures to determine system 
effectiveness. Target completion date is 31 October 1996. 

Target completion date for the NRO's GPRA implementation plan is 31 October 1996. 
As referenced in the NRO response to Recommendation 40, the NRO's IMC program will befidly 
implemented by 31 October 1996. As implementation of the NRO's IMC program progresses, 
and the NRO's GPRA plan execution unfolds, additional NRO performance measures will be 
identified and documented. As mandated by the Government Performance and Results Act, full 
implementation of these oversight processes will be in effect by 30 September 1997 in order to 
support the January 1998 submission of the FY1999 budget. 


(fs^^) EVALUATION OF DNRO COMMENTS: 

consider the proposed actions by the DNRO to be responsive to the 
Recommendation, 


(U) OVERSIGHT BY 
THE NRO 
INSPECTOR 
GENERAL 


(U) Note; In November 1995, during the course of this 
inspection, the DNRO announced the NRO/IG decided to leave his 
position. In Febmary. 1996. during the processing of this report, 
the NRO Director and Deputy Director were re-assigned. 


(U) Effectiveness of 
the NRO/IG 


Under the dircetion. authority, and control of the 
DNRO. the NRO/IG has broad responsibilities for assuring ail 
activities arc conducted in compliance with appropriate law. 
Executive Orders, Presidential Directives, and DNRO guidance 
and direction. The NRO/IG, who reports directly to the DNRO. is 
not a statutory inspector general. NRO Directive 90-1, dated 10 
January 1990. describes the major functions of the NRO/IG. which 
includes investigation of allegations and reports of fraud, waste, 
and abuse, and conducting vigorous and independent inspections 
or audits of NRO components. 


(laQUdD The NRO/IG consists of audit, inspection, and 
investigative staffs. The authorized staffing level is Q which 
includes secretaries and other support personnel. There arc 


. i pon 

currently on board m auditors. inspectors, and 
investigators. In addition, the IG staff is augmented by a few 
rotational personnel from CIA. Air Force, and Navy. Sixty-seven 
percent of the NRO/IG positions are filled at this time. 
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FINDING: NRO/IG management practices, as well as DNRO lack of support to 
the IG, resulted in inelTective oversight capability. 


Wc concluded the former NRO/IG did not provide 
effective oversight of the organization. Interviews and survey data 
indicate inadequacies in the management practices of the NRO IG. 
and a lack of confidence by the former DNRO in the NRO IG 
which contributed to this .state. 

( FQItlQ ) The inadequacies in the management practices of the 
NRO/IG were reported to the team by employees from several 
NRO components. These are .summarized as follows: 

- The time required to produce a report was excessive and 
reports were outdated when published. There arc no 
detailed records kept within the NRO/IG which would 
enable us to identify the time frames for each step in the 
process: however, .several knowledgeable people claimed 
that the internal IG editing proce.ss. including that by the 
director, took longer than ncccs.sary. usually 2 to 3 months. 
Wc found several recent reports which took S to 10 months 
from initiation to publishing. Wc judge this to be excessive 
given the limited scope of the reports and the small size of 
the components inspected. 

- The entire inspection staff would be assigned by the 
Director. NRO/IG. to one inspection at a time and would 
not be disbanded until the report was (verbally) approved 
by DNRO. Because the draft report usually took several 
months to edit, the inspection staff would be 
underemployed for that time period. 

- Wc found no current process to ensure components 
implement recommendations. This is In conflict with 
provisions of a DNRO letter to senior program directors 
and the NRO/IG. dated 22 November 19Ky. on procedures 
for NRO/IG follow-up and rc.solution. One of the 
provisions is: "The status of open findings shall be leported 
every' 90 days starting with the date of the draft report." 
The IG has created a database of ihc.se findings or 
recommendations: however, the database has only been 
used sporadically to check on compliance. 

(P00©) Wc al.so found the DNRO had liinilcd confidence in 
the NRO/IG to provide balance between oversight of the 
organization and the imposition of perceived additional 
burdensome procedures. The DNRO preferred to have all issues 
surfaced in an inspection or audit to be solved between the 
component affected and the NRO/IG before the substance of the 
report was presented to him. Some employees stated their belief 
the D.NRO generally supported the manager of the in.spcctcd or 
audited continent over the NRO/IG. 
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In adUilion. there were other indications of a lack of 
general support by the DNRO for the NROdG. The IG had not 
produced an annual plan describing inspections and audits to be 
performed since FY 94. Although the N'RO/IG requested the 
DNRO and all senior NRO managers to provide topics for 
in.spcction or audit, none have been submitted. The NRO/IG has 
been unsuccessful in getting DNRO support to fill .several vacant 
inspection staff positions by technically skilled employees on a 2- 
ycar assignment. Effective inspections of components engaged in 
high technology efforts depend upon having such skills in the IG. 
Thc.se positions have not been filled for about 3 years. These 
points suenest a lack of .support by the DNRO in the activities of 
the .NRO/IG. 

( FOUO ) The installation of a new DNIIO and new NRO'IG 
provides an opportunity to revitalize the NRO' IG as an effective 
and independent olTicc. The DNRO and N'RO/IG should explore 
appropriate mcthani.sms to accomplish this. 


RECOMMENDATION 39: The DNRO direct and support development and 
implementation of an eflicient IG project planning, monitoring, and follow-up system to 
improve oversight capability, effectively use the NRO/IG staff, and ensure component 
compliance with recommendations. Actions to be completed by 30 September 1996. 


(n 9m DNRO COMMENTS: 

Concur. The NRO.'fG now participates on the NRO Senior Staff ami Manafiement 
Committee; several special oversight tasks have been assigned to the NRO/IG: ami clarification 
of the NROHG's reporting chain will he reflected in a revised NRO organization chart. 
Internally, the NRO/IG will develop and implement an oversight planning, monitoring, and 
follow-up system by 30 September 1996. 


evaluation of DNRO COMMENTS: 

We consider the proposed actions by DNRO to be responsive to the Recommendation. 
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(U) INTERNAL MANAGEMENT CONTROL PROGRAM 


(LI) BACKGROUND (U) The concept of Internal controls encompasses organization 

plans and management methods and procedures to ensure resource 
use consistent with laws, regulations and policies. Internal 
controls arc designed to safeguard resources against waste, loss, 
and misuse; and to obtain, maintain, and fairly discIo.se reliable 
data in repons. 

(U) DoDD 5()1().3H. dated April 19K7. establishes the Dcfen.se 
Depanment IMC program. It provides policy guidance, prescribes 
procedures, and assigns responsibilities for IMC program 
execution. There arc fifteen specific IMC reporting categories 
contained in DoDD 50I0..38 that Dcfcn.se agencies mu.st address. 

(POUG) The NRO Directive 13. dated 22 September 1994. 
documents NRO policy and a.s.signs responsibility for 
implementation of internal management controls. It does not cite 
DoDD 5010.38 as a reference. However, previous DoD IG audits 
cite DoDD 50I0.3K as a reference in findings related to 
deficiencies in NRO internal management controls. In one DoD 
IG Audit. Report No. 90-068. the DNRO concurred the NRO 
lacked "internal controls over advanced funding as a materia! 
internal control weakness in accordance with DoD Directive 
5010.38." 

(fi©W) The NRO Chief of Staff maintains overall 
responsibility for IMC Program implementation and the NRO 
Comptroller is the executor. The Comptroller developed the 
program, provided guidance to facilitate the assessable unit's 
implementation, monitored implementation of unit programs, 
reviewed unit vulnerability assessments and management control 
plans for compliance, and u.sed assessable unit annual Statements 
of Compliance as the basis for developing the DNRO’s Annual 
Statements of Compliance. The first DNRO statements were 
.submitted to the SECDEF and the DCl on 29 December 1995. 

CfWO) The NRO's IMC Program is governed by the 
following documents: 

- 0MB Circular A-123. Management Accountability and 
Control, 21 June 1995; 

- 0MB Circular A-127. Financial Manaiicment Svstcm.s. 23 
July 1993; 

- OMB Circular A-130. Management of Federal Information 
Resources. 15 July 1994; 

- DoD Directive 5010,38. Internal Management Control 
Program. 14 April 1987; and 


aDOnilT » D¥DMAN ' TALDNT tttJVIIOLD 


115 










9Be RIST«D1 i *E W A W i.T ? t - L - B f<‘ HHB r »0LB 


IMC PROGRAM 


- NRO Directive 13. Federal Managers Financial Integrity 
Act. 22 September 1994. 

(SOUd) The DoD/lG conducted an audit of the NRO IMC 
program in 1994. The report stated the NRO did not have an 
adequately implemented IMC program. It further .stated the NRO 
had not prepared and submitted annual statements of assurance to 
the SECDEF and DCi. 


ISSUE: The NRO does not have an adequate IMG Program. 


(U) 

IMPLEMENTATION 
OFTHE IMC 
PROGRAM 


(rOUO ) The NRO IMC program consists of a series of self- 
evaluations whereby assessable units establish and monitor internal 
controls to provide reasonable assurance of compliance. 
Assessable units include all directorates, offices, and staff 
elements. The assessable unit manager: establishes a program of 
vulnerability as.scssmcnts. audits, reviews, and corrective actions; 
performs a vulnerability a.ssessment of each component in the unit: 
assigns a risk factor-high, medium, or low-to the unit as a whole 
and each component: develops the unit's management control plan: 
and submits a certification statement to the DNRO by 1 .November 
every year. 


(4^01*0) FENDING: The NRO's IMC Program is not fully implemented. 


The NRO began implementing an IMC program in 
FY 95. We found some components expended the re.souiX'cs and 
time to properly and completely implement provisions of NRO 
Directive 13 and others who,sc efforts were inadequate. The 
principal barriers to full implementation were: 

- Lack of a strong comrnitmcnl to a standardized internal 
management control program: 

- Lack of completed liMC manager training; 

Lack of complete assessable unit management control 
plans: and 

- Lack of standard vulnerability assessments. 


RECOMMENDATION 40; The DNRO direct review and revision of the Internal 
Management Control Program Implementation Guide to ensure full compliance with NRO 
Directive 13. Actions to be completed by 31 October 1996. 
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DNRO COMMENTS: 

Concur. NRO Directive 13 and the NRO fMC Program Implementation Guide are 
currently being revised. Directive 13 will incorporate greater standardization among common 
program elements while allowing appropriate flexibility for implementation; individual 
responsibilities for all NRO managers and staff; and specific items to be included in a.s.u’ssahle 
unit management control plans. Corrective action completion date is 31 October 1996. 


(PUUUI EVALUATION OF DNRO COMMENTS: 

(FO&O) We consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 


(U) INADEQUATE (U) There arc components within the NRO with adequate 

DOCUMENTATION across-the-board documentation concerning specific IMC 

processes. We found the directorates have proper documentation 
on IMC processes related to the development and acquisition of 
satellite systems, including requirements definition documentation, 
configuration control board process documentation, and 
procurement process documentation. However, we did not find 
such adequate documentation for other processes. 


FINDING: The NRO lacks adequate descriptive materials on policies, procedures, 
administrative practices, responsibilities, duties, and authorities. 


IMC managers were not aware of the full range of 
descriptive documentation on operating procedures and 
administrative practices, and responsibilities and authorities for 
accompli.shing programs and activities required tor proper 
implementation of NRO Directive 13. In our judgment, 
inadequate documentation of this type weakens the KRO’s IMC 
Program and results in internal management control failures. We 
found the NRO does not have adequate documentation for defining 
procedures for receipt and payment of cost-reimbursement contract 
invoices and docs not have an adequate propeny accountability 
system due to the lack of a published property management 
procedure. These examples indicate basic failures in internal 
management control documentation, monitoring, review, and 
verification. 


RECOMMEND.ATION 41: The D.NRO direct additional training as required to 
ensure I.VIC managers understand the full range of IMCs required for a successful 
program, including documented specific policies, procedures, and administrative practices. 
Actions to be completed by 31 October 1996. 
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IMC PROGRAM 


i mUO ) DNRO COMMENTS: 

Concur. The NRO is implementinf: a training concept to supply the proper level of 
training to all managers and stpff members. In addition, an ongoing program of visits with each 
a.KSessahle unit coordinator within the NRO addresses management control documentation 
requirements. Through these visits and training sessions it is envisioned that unit coordinators 
and managers willfidly understand the range of management controls required for a successfid 
program. In fact, various directorates and offices are already refining or creating policy, 
procedure and administrative practice manuals. We will continue to review all functional areas 
to determine where additional documentation is needed. Corrective action completion date is 31 
October 1996, 


t POVO ) EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions by the DNRO to he responsive to the 
Recommendation. 


(POUO) FINDING; The NRO's IMC Program is non-standard and not adequately 
monitored. 


(II) A NON- rTOTO) Wc judged the NRO Implementation Guide does not 

STANDARD IMC provide sufficient detail for IMC managers to develop a 

PROGRAM standardized, comprehensive program. Several senior NRO 

managers indicated difficultic.s in implementation because they 
had no standard mode) for their programs. The NTlO's IM6 
Manager claimed the guide was not designed as a procedural 
standard, but allowed assessable unit managers to implement 
programs tailored to needs. Therefore, each a.ssessablc unit 
implemented quite different IMC Programs. 

We found the following shortcomings: 

- Risk assessments were not created correctly: assessable 

, unit comparisons were not meaningful; 

- Vulnerability assessments were created differently among 
assessable units; 

- Control technique descriptions were dLssimihir among the 
assessable units: and 

- Review schedules were incomplete, and review checklists 
were not used. 

(POUO) Wc found inadequate monitoring of infra,structurc 
.support processes led to interna) management control failures. 


IIS 


SFCBFT RVBMAM TALENT mOYIIOLE 











gEGRgr " D¥EMA t< - T ALEf<T KETBOLE 


me PROGRAM 


Previous sections of this report identified several such failures: 
lack of proper procedures to assure funds cenificaiion prior to 
processing contract actions: contlicting security guidance: and lack 
of a property accountability system^ A fully developed and 
monitored IMC program would alcn the NRO to these and similar 
problems. 

RECOMMENDATION 42; The DNRO direct implementation of a standardized 
and comprehensive IMC program. Actions to be completed by 31 October 1996. 


DNRO COMMENTS: 

Concur. The modified NRO IMC Program will he based on: I) 0MB Circular No. A- 
123. Manai>emenf Accountahiliry and Control, dated 21 June 1995. and 2) DoDD 50J0.3S which 
i.s currently beiny reissued to incorporate the more flexible 1995 0MB fiuidance. A revised NRO 
Directive 13 will provide a standard structure for a comprehensive management control 
program while allowing appropriate fle.xibiUty for implementation. Additionally, the NRO IMC 
Program Implementation Guide is being revised to include recommended standard tools, 
including a management control plan format and control review checklhts. Program monitoring 
is enhanced by unit coordinator meetings held every 4-6 weeks to discuss program i.ssucs and 
happenings. These meetings are supplemented by visits with each assessable unit coordinator to 
address management control documentation requirements. Corrective action completion date is 
31 October 1996. 


i f iOHO ) EVALUATION OF DNRO COMMENTS: 

We consider the proposed actions of the DNRO to be responsive to the 
Recommendation. 
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APPENDIX A 
PRIOR COVERAGE 


APPENDIX A SUMMARY OF PRIOR COVERAGE (U) 


(U) DEPARTMENT OF DEFENSE COVERAGE 


1^0*4 0) Au.dit.Report.on the Implementation of the Internal Management Control 
Program at the National Reconnaissance Office. Report No. 9S-137. February 28. 1995 . 
The audit objective was to determine whether the NRO successfully implemented an Internal 
Management Control Program. The auditors found the NRO had not adequately implemented an 
Internal Mtuiagemcnt Control Program that fully complied with 0MB Circular A-123. The 
NRO had established an Intcmal Management Control Program for its SIGINT Directorate but 
not for its IMINT Directorate and other NRO Offices. In addition, the NRO had not prepared 
and submitted annual statements of assurance to the SECDEF and the DCI on the status of its 
internal controls system. It noted the NRO issued guidance that adequately addressed the 
auditors concerns regarding the establishment and implementation of the Internal Management 
Control Program in each of its .satellite systems and other offices. However, the auditors noted 
the guidance did not fully address concerns regarding annual statement of assurance. 


Audit Report on theia^illOItyj System. Report No. 95-136. 

IS>95 . Evaluated the ettectivcness of the acquisition management of the 
M system. The audit showgdthctcchnical performance aspects of thcjmi^^ 
.system were outstanding and the l0Iillfll0M Proaram Offi ce aesressively addresscTtfi^ 


(b)(1)(c) (b) 


I Program Office adequately managed 


technical issues that aro.se in the .system. The [__ __,_ 

the system’s contract procedures, mission effectiveness, product improvement, operation and" 
maintenance budget spending trentLs. and cost e.stimatins and analysis. However, the audit 
identified conditions requiring corrective actions: ^—>' ■ — 


(b)(1)(c) (b)(3) 10 use 424 


. the 


system contractot^niMh^BasK^^issioi^uidanc^iocumcn^a^utdatct^^M^S^^^aily 
ta.sking messages did not correspond to the time frames utilized by the mi.ssion planners. 



Audit Report on Air Force Specialized Incentive Contracts for National 
Reconnaissance Office. Report No. 94-096. .Mav 13.1994 . The primary objective of the audit 
was to evaluate the overall approach, principal provisions and features, and rationale for 
specialized incentive procedures in contracts for NRO systems. The auditors found the Air 
Force incorporated incentive and award fee provisions into its specialized incentive contract in 
accordance with FAR. DFAR. and Air Force guidance. Evaluation criteria contained in the 
incentive and award plans allowed fee determining officials to equitably score each contractor’s 
performance. Adniini.straiion of specialized incentives was con.sistcnt with the terms of the 
contracts and with the criteria stated in the plans. 
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Audit Report on the Acquisition of the 


Satellite System. Report No. 


94-ft42. Fcbniar\-17.1994 . The audi t objective was to evaluate the effectiveness of the 
acquisition management of thc lt^iyiM satellite system. The auditors found that thcQ^S^ 
Program Manager was taking sutticient management actions in the areas of correction of 
deficiencies found in prior reviews, audits, and tests; design maturity: prosramstability: test and 
evaluation: «md mission need versus system requirements. However. thcQ^m satellite sy.stcm 
lacked historical and contractual documentation and did not have written acquisition plans. 
Program decisions could not be analyzed, sy.stcm evolution was difficult to trace, acquisition 
planning could not be reviewed and evaluated, and internal controls were weakened. There was 


insufficient a.ssurance that_ 

and content of portions of the current contract for production of 
interest of the Government. 


satellites were being cost-eff ectively p rocured. The structure 

are not in the best 


(b)(1)(c) 


tl') Audit Report on Internal Controls at the National Reconnaissance Office. 

Report No. 90-068. Mav 18.1990. 

The objective ot the audit was to determine whether the NRO had adequate controls over 
funding and contracting and had Implemented the Federal Managers Financial Integrity Act of 
1982 (FMFIA). The audit showed the internal control environment at the N'RO was positive; 
moreover, the NRO had extremely competent personnel who were instrumental in the succe.ssful 
development and deployment of rcconnai.ssancc satellite systcm.s. The NRO's organizational 
structure and management philo.sophy. however, impeded the ability of the Director. NRO to 
exercise management oversight at the three components. The NRO staff was reluctant to 
cxca'ise oversight of three components. The audit noted the following deficiencies: DoD 
incremental funding policies were not adhered to by NRO components; and. a substantial 
number of modifications to contracts in the audit sample were not executed in accordance with 
Federal Acquisition Regulation guidelines: the NRO did not formally implement the FMFIA. 
The auditors found, the NRO did not fully implement the FMFIA: did not have a formal audit or 
inspection follow-up and re.solution procedures in place: did not document most controls: and 
did not expand the .N’RO .secure hotline to contractor'personnel. The auditors recommended that 
the N'RO implement the FMFIA. the .NRO Inspector General review internal control procedures, 
the NRO establish a formal follow-up and resolution procedures, and the NRO establish a secure 
IG Hot Line for their personnel. 


"£in(b)(1)(c) (b)(3) 10 use 424 


conferees. 


(U) CIA COVERAGE 


(b)(1) 1.4(c) (b)(3) 10 use 424 
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(II) NRO COVERAGE 


Audit or[(DHIIBM ^^3jyagjga||gH fo r the National Reconnaissance Office. 
NRO IGProjecf No. 95-05. Aiij»ustJ0ri995. The objective of the audit was to dotcrminc the 


effectiveness and efficiency ofQQI support to program operations. The auditors found: a 
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formal agreement between the NRO and the il which defines^_ 

and managerial accountability and responsibility has not been implcmenicd: 
supplies and materials are not transponed to NRO customers in the mo st cost'cTicctive mann er 
excess material accumulated without an effective disposal orocess: the 


organi zation al, operational, 
procured 


(b)(1)(c) (b)(3) 10 
use 424 


TSffh Inspection of the Human Resources Management Group. NRO IG Project 95- 
01. .lune 9.1995 . The inspectors identified the following findings: Lack of communication 
between NRO senior management and HRMG in some personnel and staffing decisions created 
important voids in a critical partnership; the HRMG Wcstficlds plan benefits the group with 
internal focus for collocation and consolidation and doesn't address the potential impact 
centralized collocation might have on customer support in the directorates; employees arc 
frustrated at a luck of action and need reassurance from senior management of equitable 
treatment, whether Air Force. Navy or CIA: Navy personnel suppon remains isolated, narrowly 
focused through SPAWAR and prohibits an effective and efficient NRO-Navy working 
relationship; the Training and Development Division (T&DD) lacks the management suppon. 
resources, fiscal, or program authority to implement an adequate training and career 
development service. Inspectors noted a probable duplication of effonsTlack of needs analysis, a 
possible waste of dollars; and. lack of a corporate training priority. Inspectors review of the 
Civilian Intelligence Personnel Management Sy.stcm (CIPMS) suggests it may allow for greater 
flexibility in Air Force civilian personnel management and has been in review by HRMG tor 
some time. 


Inspection of NRO IG Project No. 94-40^ 

March1995 . The inspcctof.s"asscs.scd how{|gflB^Jfmects: demands for sati.sfying 
customers, managing human and financial rc.sources. and maintaining some measure of 
standardization, stability , and control . The inspectors noted three significant findings and made 
several key suggestions: expanding mission and lack of Government personnel 

resources rcsultcd in hiring non-Govemment personne l to accomp lish the mission: the current 
joint Configuration Control Board (CCB) actions take an extraordinary amount 

of time with risk to the Government. Suggestions includcd r jtHc Ch ief s of Contracts and Project 
Engineering Staff implement a year end spending plan: thcQ^|^[m reevaluate what should be 
done with hisrcsources to cnsurccunrcni roles and mi.ssions arc not affected; incrca.scd emphasis 
be placed onBSBBEI roles made to keep employees 

advised ofQ^j^g activities: find a better way to ensure all 

affected parties get appropriate early communications during the Request for Change (RFC) 
process. 


.\udit of Funds Transferred To and Received From Other Government 
Agencies forJhe National Reconnaissance Office. NRO IG Project No. 94-34. Februan- 28. 

1995. The auditors reviewed the NRO's procedures and internal controls governing funds 

transferred to and received from other government agencies. The auditors found the Comptroller 
and NRO finance officials have in.stitutcd effective procedures governing funding cran.sfers. The 
auditors also found in almost all ca.scs that program officials tasked to monitor implementation 
of transferred funds provided the ncce.ssary oversight to a.ssure the required goods or services 
were received or delivered satisfactorily. Funher. the auditors determined that the NRO 
Directorates have implemented a variety of procedures governing fundin g transfers that mav or 
mav not include the approval of transfers bv WiO management officials.^ 


(b)(1) 1.4(c). (b)(3) 
louse 424 
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* ‘11* 4 of Conference Registration Fees For the National Reconnaissance 

Ofllce. NROIC Project No, 94-25, October 21» 1994 . The auditors reviewed the policies, 
processes and procedures for the collection and u.se of conference registration fees within the 
NRO. The auditors determined the financial administration of conference fees and any 
outstanding surpluses were accomplished through informal record keeping, outside official 
government accounting systems, and w'as not .subject to normal management policy and 
oversight controls. The auditors also identified differences in administrative procedures 
governing the assessment of conference fees and confusion regarding the appropriateness of 
providing refreshments to government employees attending NRO-sponsored conferences. 
Finally, although the auditors identified five isolated instances where NRO employees were 
mistakenly reimbursed for conference fees which paid only for refreshments, the auditors found 
no indication of intent to defraud the government. 


(b)(1)(c) (b)(3) 10 use 424 


' Manage ment Review of Detachment 4» 

I NRO IG Project 94-36. .lulv 25. 1994 . Detachment 4. Joint 

_ _ _ was establi.shcd in 1984 as an 

clement of the NRO Communi cmions^Officc._wit^^ thg j[?nmarY_nmsion to provide 
communications support to the 


(b)(1)(c) (b)(3) 10 use 424 


(b)(1)(c) (b)(3) 10 use 424 


_ _ The goal of the review was 

to provide the Director. Information Technology Group UTG). with a useful management tool to 


. 

assist in measuring the success and effectiveness ot Dct^ and to identify areas where new 
initiatives or corrective actions might be needed. The pnncipal areas of review were 
management effectiveness, use of resources, and relationships established and maintained by the 
Detachment. The review resulted in no significant findings. 


Inspection of Counterintelligence Staff. NRO IG Project 93-32. .lune 13.1994 . 

The inspectors found the NRO Cl Staff to be a small, dedicated, motivated, experienced, highly 
specialized cadre of professionals with varying backgrounds. The inspectors, however. not£d the 
foUowinj^irulingsJljcr^^i^fficially documented ayreement between the NRO andoBQ 

regarding the^lQ^B positions on the Cl StaffMneCI 
Staff has inadequate rc.sourccs to effectively accompnsnltsgTOwing operational and analytical 
requirements: the protection of the affiliation between the Cl Staff and the NRO at the 
BYEMAN level inhibits productive, efficient, effective working relationships. 


Review of NeXT Workstation Acquisition for the NRO Headquarters. Case 92-9. 

September 30.1993 . The review was initiated as a result of allegations that the acquisition of 
NeXT workstations was unnecessary and a waste of NRO funds. The reviewers found the 
allegations to be in error and not substantiated in fact. The reviewers noted however that the 
impact on users caused by the transition to NeXT workstations could have been reduced if the 
decision process more fully documented, coordinated, and communicated development and 
acquisition inforrnation with the participating offices. The reviewers findings were: the decision 
making and review process used for the acquisition of the NeXT workstations did not adequately 
document, coordinate, and communicate information with the affected NRO headquarters 
offices: and 0&.M data was available which was not exploited or analyzed to contribute to 
improving the current and future NRO AIS. 


Audit of the 


(b)(1)(c) (b)(3) 10 use 424 


I 


1(b)(1)(c) (b)(3) 10 use 424 


(b)(1)(c) (b)(3) louse 


_in lh 5 _)<Jt:ntitY of contractor and tiovemmcnt personnel on 

temporary duty at thc^g2ll^^{S2ililSi^Sy||HHIIIH^H9* evaluated the 

economy and efficiency of suppor^nutn^ncciivcnesi^nntcmal controls over various 
aspects of the program. O vcraljr the auditors found the underlying premises and operational 
requirements necessitating QQO need reappraising and re-validating due to the changing 
security environment. Congrcssionally-dircctcd budget and cost reductions, and the lack of 
current validated .security requirements and cost benefit evaluations. The auditors further noted 
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management oversight of [ 


I operations needs strengthening to enhance the internal controls. 


security requirements and cost benefits. The auditors also found the NRO needed to monitor the 


travel of non-mission-cssential personnel to 


(b)(1)(c) 


to ensure the program was not used inappropriately for unnecessary travel. 


sites and develop a policy and procedures 


fSlfW Review of Economy Act Transfers in the Intelligence Community to Non- 
Defense .4ct{vities. March 29.1993 . Pursuant to direction in the Classified Annex to the House 
Appropriation Committee Repon accompanying the Fiscal Year 1993 Defense Appropriation 
Bill, the KROIG conducted a review of funds transferred from the National Rcconnai.ssancc 
Program (NRP) to any activity not funded by the Defense Appropriation Act. The NRO IG 
determine all transfers to non-defense appropriated activities were within the term.s of the 
Economy Act of 1932. as amended. All of the funds transferred reimbursed other activities for 
goods and services directly benefiting and supponing authorized NRO requirements, missions or 
functions. 


Review of Fine Arts Acquisition for the NRO Headquarters^ Case 93-3. 

February 22. 1993 . A complaint from an NRO employee resulted in the NRO IG review of 
circumstances sunounding the procedures and proce.sscs u.scd by Management Services and 
Operations (MS&O) to acquire art works. The NRO determined the general processes and 
procedures used by MS&O for the acquisition were proper and rca.sonable. However, the review- 
identified procedures and controls needing improvement: the NRO does not have an approved 
written policy or procedures endorsing and governing the acquisition of non-essential public and 
othcc area enhancements such as an: the rcspon.sible officials who sign .such requisitions had not 
been formally delegated such authority by the contracting officer; the NRO had not developed 
and implemented a unified control system for accountabfe property in the NRO headquarters 
area. 


nnaissance Office. November 20, 


(^) .Audit of Airlifl Support to the National _ 

1992 . For Fiscal Year 1992. the NRO budgeted about for airlift support to Programs 

A. B. and C. The audit evaluated the economy and efficiency of airlift practices and internal 
controls exercised over the budgeting and billing process. The findings arc as follows: the NRO 
could achieve significant savings by consolidating flights to better use cargo space and by taking 
offered: the NRO needed to a.sscss the practice of routinely billeting 
aircrews in more co.stly off-base commercial uuaners in.stead of using 


available government quarters; problems existed with 
verification. 


(b)(1)(c) (b)(3) 10 use 424 


billing 
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APPENDIX B EVOLUTION OF AUTHORITIES (U) 


(U) A I95K National Security Council (NSC) memorandum directing the DoD to give 
priority to the development of an operational reconnaissance satellite and the creation of the 
Reconnaiss^cc Satellite Program in 1960 laid the foundation for the NRP and the NRO. Since 
their inception in 1961. authorities and oversight for the NRP and NRO have followed different 
evolutionary paths. Although there was a rapid evolution of management authority in the early 
1960s. there has been little change since 1965. By contra.st. the oversight structure and 
mechanisms evolved slowly at first, progressed markedly in the 197()sT and changed significantly 
in the 1990s. In fact, evolution of the oversight structure has continued to the point that there is 
now little relationship between the authorities for the NRP and NRO activities outlined in the 
charter documents and the oversight of that program and organization. 

(U) The 1960s 

(U) The NTIO charter consists of a pair of .separately derived documents: a 1964 DoD 
Directive and a 1965 Agrcement between the SECDEF and the DCl. 

(U) The 1965 Agreement is the last of a .series of four agreements signed between 1961 
and 1965. During this period, officials struggled to balance DoD and CIA equities in managing 
a national program through a covert, joint agency. The first Agreement. Management of the 
National Reconnaissance Program, was signed by the Acting Director. CIA and the 
DEPSECDEF on 6 September 1961. This"Agreement provided for a program conducted 
"through Ithc) use of streamlined special management procedures" and jointly managed by co¬ 
equal DoD and CIA officials, placing it under the direction of the Under Secretary of the Air 
Force and the Deputy Director (Plans)/C1A. acting jointly. A NSC committee rejected, almost 
immediately, the co-director provisions, regarding divided management inappropriate for .such 
an imponant program. The first Agreement also included joint (DoD/ClA) staffing language and 
a definition of the NRP: gave the NSC a review role: jind directed the establishment of a uniform 
.security control system. 

(U) The second Agreement. Responsibilities of the National Reconnaissance Office, was 
signed by the DCI and DEPSECDEF on 2 May 1962. Ba.sed on the NSC recommendation, this 
document specified a single director, designated by the SECDEF and the DCI. responsible 
directly to them for the management and conduct of the NRP; it also gave responsibility for NRP 
security policy to the CIA. Like the first Agreement, the 1962 Agreement came under quick 
scrutiny, this time by the President's Foreign Intelligence Advisory Board (PFIAB). Ba.sed on a 
PFIAB recommendation to "study a more satisfactory documentary basis for the NRO." a third 
agreement was drafted. 

(U) The third AgrccmenL Management ot the National Reconnaissance Program, was 
signed by the DCI and DEPSECDEF on 1.^ March 1963. This Agreement established the 
SECDEF as the Executive Agent for the NRP. although pwlicies and guidance to develop, 
manage, and conduct the NRP were to be "jointly agreed to by the SECDEF and the DCI." This 
was the first agreement to establi.sh the NRO as a separate operating agency of the DoD. under 
the direction, authority, and control of the SECDEF and to exempt The"DNRO from un.solicitcd 
outside assistance. Returning to a provision in the 1961 Agreement but ab.scnt from the 1962 
Agreement, this version also exempted NRP projects from"normal DoD or CIA staff review. 
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(U) As a result of crilicisms noted in a May I964PF1AB memorandum,* afounh 
agreement was crafted. The PFIAB recommended strengthening the role of the SECDEF as 
Executive Agent for the NRP: strengthening the role of the DNRO; and establishing a 
coordinated, comprehensive budget for all elements of the Program. The PFIAB also 
recommended me Executive Agent report periodically to the Prc-sidcnt's Special Assistant for 
National Security Affairs and the PFIAB concerning all aspects of the Program. The 
DEPSECDEF and DCI signed this fourth and current Agreement for Reorganization of the 
National Reconnaissance Program on 11 August 1965. While this Agrectnent did .strengthen the 
role of the SECDEF. giving him review and final approval power over the NRP budgct. theso 
responsibilities were later transterred to the DCI.^ The 1965 Agreement also established the 
NRP Executive Committee (EXCOM) "to guide and participate in the formulation of the NRP." 
but this committee was abolished by EO 11905 in 1976. Finally, this agreement included joint 
staffing language missing from the 196.^ Agreement, but it did not include the previous version's 
wording concerning exemptions from normal DoD or CIA staff review and unsolicited outside 
assistance. 

fS") The DNRO at the time expressed his concerns about the 1965 Agreement to the 
SECDEF. In a letter he wrote in late September 1965. just prior to his departure, the DNRO 
asserted that the 1965 Agreement went to less extent in defining the .structure of the NRO than 
the 1963 Agreement. He said the 1965 Agreement was less explicit in stating the authorities of 
the DNRO and too circumscribed in those it did define, and he believed it both weakened the 
NRO and introduced sources of additional friction. The three specific wcaknc.sses he noted 
were: 


The Agreement was ambiguous in defining the authority of the EXCOM: 

It almost completely omitted reference to responsibilities of the DNRO in 
connection with reconnaissance operations; and 

It imposed no obligation upon the CIA. or anyone other than the SECDEF. to 
provide a focus of responsibility for action undertaken in the NRP. 

(LI) Largely Independent of the agreement process, the DoD Directive that established the 
NRO as an operating agenev of the DoD was i.ssued early in the evolution of the SECDEF/DCl 
agreement. On June 14 1962. the DoD issued DoDD TS-5105,23. Subject: National 
Reconnaissance Office, which 

established a coven National Reconnaissance Office within the DoD under a 
DNRO. appointed by the SECDEF: 

defined the NRP; 

mandated the conduct of the NRP through the u.sc of ".streamlined manauement 
procedures:" 

exempted NRP projects from normal DoD staff review: 


Tlio niomonuulum ohsorved ihai ihc NRP had ih>i reached its full potential because "of inadetiuacies in the 
orgiuiirational .structure and support of ihe national reconnaissance elTon,.. complicated bv the absence of 
clear, authoritative delineation and understanding of pertinent role.s tmd missions of the DoD, CIA. and 
DCI • • 

2 Presidential Direciivc/NSC 17. August 1977 and EO 12036.24 Januart-1978. a-ssigned program and budget 
authority lonhc NRP to the DCI. ' . t- t 
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exempted the DNRO from unsolicited outside staff assistance; 

granted the DNRO authority to "organize, staff, and supervise the (S) NRO"; 
"establish, manage, and conduct the (TS) NRP": and review all DoD budget 
requests... within the NRP. 

The Directive did not. however, address all the concepts included during the 
various iterations of Agreement development, such as the NRO falling under the direction of the 
Under Secretary of the Air Force and the Deputy Director (Plans) of the CIA acting jointly, the 
joint staffing language, or the CIA responsibility for NRP security policy. A revision was issued 
on 27 Mar 1964, which gave cognizance of special security control systems for NRP 
communications to DIA and addressed other security arrangements. In addition, the Directive 
was amended via memo in 1979 to include the Defen.se Space Operations Committee and 
cstabli.sh its role as "the principal advisory body to the SECDEF for the (S) National 
Reconnaissance Program."^ In September 1980 the SECDEF requested the DNRO "update and 
revise" the Directive to incorporate changes resulting from the establishment of a Defense 
Reconnaissance Support Program, but the 1964 Directive was not revised and remains the extant 
Directive for the NRO, 

(U) The net result of the chartering process was that the NRO was established as a 
Defense agency, which it remains to this day. The NRO consisted of a small headquarters staff 
that provided direction for the line functions of the three component programs. The first director 
of the NRO establi.shcd by memorandum the basic structure of the organization as three primary 
programs each supported by a non-NRO parent--the Air Force (Program A), the CIA (Program 
B). and the Navy (Program C). 

(U) The SECDEF was given "ultimate responsibility for the management and operation 
of the bWO and the NRP" and had the authority to choose the Director, NRO. with the 
concurrence of the DCI. and to "review and have the final power to approve the NRP budget." 
The Directive authorized "streamlined management procedures", and exempted NRP projects 
from "normal DoD .staff review" and unsolicited assistance. As the operating arm of the NRP. 
however, it also had national tasks with attendant responsibilities to the DCI as well us the 
SECDEF. The DCI had authority to establish the collection priorities and requirements, provide 
security policy guidance, and review and approve the NRP budget. 

(U) Although authority to "organize, staff, and supervise" the NRO and "establish, 
manage and conduct" the NRP was set by 1965. neither the Directive nor the 1965 Agreement 
addressed oversight of the organization and program. The NRP EXCOM. consisting'bf the 
SECDEF. DCI, and the Special Assistant to the President for Science and Technology, provided 
some budget and programming oversight, but it really .served as a joint .steering committee for 
the SECDEF and the DCI. No OSD staff clement was identified to a.s.si.st the SECDEF in 
executing his responsibilities until 1969. when the SECDEF established a Special Assistant for 
Intelligence, whose responsibilities included the NRP. 

(U) The 1970s 

(U) The designation of an OSD official in 1969 to monitor the NRP initiated a practice 
that was inconsistent with the streamlined management language in the 1960 NSC memorandum 
that called for the development of a reconnaissance satellite program, as well as the Directive, 
which specifically exempted NRP projects from normal staff review. The 1972 establishment of 


DoDD 3500.1.29 December 1988, canceled ihe memorandum and e.slabli.shed the Defense Space Council: the 
DoDD was noi revised lo reflect lhi.s 1988 change. 
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an ASD for Intelligence and the emergence in 1977 of the ASD(C3I) further established a level 
of review that, to the NRO. exceeded the bound.s of its charter. The 1977 Directive on the 
ASD(C3I) notes that the ASD(C3I) is the principal staff assistant for "reconnaissance activities" 
with responsibility for "satellite activities"; that language was further refined in the revised 
charter issued in 1985 which stated that the ASD(C3I) is the "Principal Staff A.ssistant. . . for 
reconnaissance activities and including those National Prourams for which the [SECDEF] has 
execution authority." The 1985 Directive goes on to say that the ASD(C3I) will exercise 
"direction, authority and control" over the NRO’s Defense Support Program Office and "staff 
supervision over Air Force and Navy Special Intelligence Programs." an unclassified reference 
to the DoD components of the NRP. 

(U) A number of changes within the Intelligence Community that occurred shortly after 
the establishment of an OSD oversight official also impacted NRP authorities set in the previous 
decade. Unhappy with the Intelligence Community as a whole. President Nixon sought 
improvements in the very functioning of the Community, its end pwoduct, and its re.sourcc 
management. In 1971 he directed the DCI "to assume leadership of the Intelligence Community 
in planning, reviewing, coordinating, and evaluating all intelligence programs and activities, and 
in the production of national intelligence," and to prepare a consolidated intelligence program 
budget. The consolidated budget later became the National Foreign Intelligence Program (NFIP) 
and included the NRP as its largest component. Once the NRP became part of the NFIP. it lost 
its "unique" character, and became just one of several intelligence program.s. 

(U) Throughout the 1970s the President directed the DCI to exercise more and more 
control over the NFIP; as a result. DCI authority over the NRP expanded from the collection 
priorities and requirements authority of the 1965 Agreement to the program and budget authority 
a.ssigned in Presidential Directive/NSC 17. August 1977 and Executive Order 12036, January 24. 
1978. This was a significant change in DCl/SECDEF responsibilities compared to those stated 
in the 1965 AgrccmenL Also during this time frame. Executive Order 11905 (1976) abolished 
the NRP EXCOM. which had provided NRP guidance and budget approval, and established the 
Committee on Foreign Intelligence (CFI). Whereas the NRP EXCOM had been responsible for 
the NRP alone and had given the SECDEF final authority over NRP matters, the CFI, chaired by 
the DCI. was responsible for all national foreign intelligence programs. 

(U) Joint oversight responsibilities exercised by the SECDEF and the DCI through 
steering groups .such as the N^ EXCOM also changed in nature. The Intelligence Resources 
Advisory Committee (1971). the CFI (1976), and the National Foreign Intelligence Bomd (1977) 
moved the focus away from the NRP/NRO itself and towards the Intelligence Community and 
intelligence matters in general. As the DCl/SECDEF joint oversight broadened to include 
participants whose interests covered a range of intelligence initiarives. the NRO beuan to move 
to a closer involvement with the larger Intelligence Community. 


^ Congressional oversight of intelligence program.s was also formalized durinc the 
197()s. By 1976 permanent committees were formed in both Houses of Congress to oversee the 
Intelligence Community, including the NRP. Moreover. Presidential direction for greater DCI 
control oyer the NFIP me^t that the DCI. as NFIP spokesman to Congre.ss, had to balance NRP 
needs against the needs of the rest of the NFIP. Again, the emphasis was on the NRP as part of 
an integrated whole, not a.s a .separate stand-alone program. 

(U) The establishment of lower levels of review within DoD. the move from a "unique" 
single program to being part of an integrated intelligence program, changes in the budget 
authorities, the creation of advisory boards, and the formation of permanent Congressional 
intelligence oversight committees illustrate how the authorities and rcspon.sibilities evolved 
while the charter documents themselves remained static. However, the changes wrought by the 
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197()s were mostly external to the NRO and NRP; the I9K0s would bring changes of a different 
nature. 

(U)The 1980s 

(U) The early pan of the decade was marked primarily by a Presidcntially-dirccted 
(August 19K3) PFIAB review of the NRO. Asked to thoroughly examine the responsibilities and 
organization of the NRO. the PFIAB sent two separate memoritda to the President (December 
I9K3 and July 1984) with similar findings. Concerned in panicular with the NRO's loss of 
flexibility due to increased oversight, the PFIAB wrote that "the unique management structure 
tliat minimized external program oversight and review ... has been eroded fn the la.st decade 
by the Office of Management and Budget and the Congress." and the "SECDEF and DCI agree 
to .seek specific measures to increase the program and budget flexibility of the DNRO." The 
PFIAB observed that "more detailed oversight is beginning to handicap the NRO." and that the 
"SECDEF and DCI Imust) ensure that the conduct of the NRP permits continued streamlined 
management and avoids unnccessaty oversight and program review." 

(U) The PFIAB’.s worries about increased oversight and a potential loss of streamlined 
management authority had no impact on the charter documents in effect at the time, as the 
President did not request any revisions or development of a new document at the national level. 
Instead, they merely resulted in a February 1985 nonspecific Presidential request that the 
SECDEF. DCI and Assistant to the President for National Security Affairs "periodically review 
the program, priorities and resources of the NRO. as recommended |by the PFIAB)." 

(U) From 1986 to 1988 the DNRO initiated several studies to look at the structure and 
management authority of the NRO. These studies highlighted problems associated with the three 
separate program (A. B. and C) structure of the NRO and the lack of DNRO line management 
authority. Before retiring in 1988. the DNRO passed his recommendations for restructuring the 
NRO to the DCI. The Acting DNRO and the NRO Program Directors initiated another study in 
1989 to reexamine, in detail, the organizational problems identified in earlier studies with a view 
to ensure the NRO could respond to "future intelligence challenges" and maintain the strengths 
of the NRO: streamlined management, cradle-io-gravc responsibility, and Service/Agency " 
composition. This 1989 effort, formally titled the NRO Restructure Study but known as the 
Gcigcr-Kclly study, included panicipants from the NRO. the DoD. and other Intelligence 
Community agencies. 

(U) The Gcigcr-Kclly study concluded that the NRO chancr and mission were .still valid, 
although eventual declassification of the "fact oP’ appeared likely. A key recommendation 
supported maintenance of the separate program identities, but the report also recommended 
initiation of a proce.ss to collocate the 1^(5. To begin this process, the study group 
recommended collocation of staff support and the standardization of those suppon functions 
after collocation. Other key recommendations later implemented included: 

creation of a new Deputy Director for Military Support: 

establishment of an Office of Plans and Analy.sis: 

realignment of management responsibilities for the CIA clement of the .NRO: 

creation of a Board to advise the SECDEF. DCI. and DNRO (National 

Reconnaissance Review Board): and 
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reduction of the DNRO's position from Air Force Sccrctaiy/Under Secrctun* to 
Assistant Secrctarj' of the Air Force (Space) to allow the DNRO to be more of a 
full-time manager. 

(U) Despite the earlier oversight concerns of the PFIAB. the Gcigcr-Kelly report noted 
that "the basic authorities of the NRO have remained intact." In fact. thc Gciger-Kelly study 
included a Memorandum of Agreement as an appendix . . . "to reaffirm the charter and mission 
to the NRO and the SECDEF and DCI support for the management authority of the DNRO." 
although this Memorandum was never signed. The study group wrote that specific issues raised 
relating to the charter were "due to implementation problems caused by a lack of specific NRO 
policy or strategics" rather than to problems with the charter. Although they acknowledged that 
charter changes could be made, they argued that the "charter of the NRO. as written, pcirnits and 
supports the objectives of the NRO with respect to its future. . . . unless a substantial gain can 
be realized from updating or changing the charter, the risks entailed and time consumed^by 
opening up the issue argue against making any changes." 

(U> In sum. although the 1980s brought increasing external oversight, in particular by 
Congress and 0MB. the internal changes effected by the N'RO's restructuring efforts w’crc even 
more significant. Nonetheless, the Gcigcr-Kelly study declared the NROchiuter viable. This 
assessment has not gone unchallenged, however, as discussion about the NRO's authorities and 
oversight continued in the 1990s. 

(lI)The 1990s 

(U) The current decade has produced significant change in the organization of the NRO 
and its oversight structure. The NRO is now a line and staff organization and its program—the 
NRP-is now subject to the same joint review as other elements”of the NFIP. One prominent 
oversight change is the creation of a new OSD office with responsibility for space, 

(U) In 1992 the DCI commissioned a task force to assess the NRO’s organizational 
stnictiire. management methodology, and ability to respond to Intelligence Community needs. 
The Task Force issued a report (known as the Fuhrman Report) in April 1992 rccommendina the 
consolidation of Programs A. B. and C into IMINT and SIGINT Directorates and full collocation 
to achieve an integrated functionally aligned organization. These rt'commcndations were 
impiemented, thereby moving the NRO away from the .stnicturc the original charter was 
designed to support through the use of authorities, policies, and procedures of parent 
organizations, ’The new functionally aligned organization has fundamentally changed tlic way 
the NRO operates internally. With the role of the parent organizations changed, key staff 
elements arc uncertain of how to proceed, and managers ciuinot turn to the chartering documents 
for guidance. 

(U) In addition, the NRO’s oversight structure has expanded in the last two years. The 
DCI and DEPSECDEF formed an Intelligence Program Review Clroup in I99.’» to prioritize 
Defense intelligence issues among the three intelligence programs-NFIP. Joint Military 
Intelligence Program, and Tactical Intelligence and Related Activities. The NRP is subject to 
oversight from this group as well. Furthermore, the Dcfcn.se Resources Board process has, for 
the intelligence function, been expanded to provide rigorous review of the NRP budget process. 

(U) The SECDEF and DCI al.so chartered the Joint Space Management Board in 
December 1995 as a board of directors for defense and intelligence space programs, of which the 
NRP is a pan. The Joint Space Management Board provides overall policy and program 
guidance tor defense and intelligence space programs to include review and approval of trade¬ 
offs among requirements, programs, and resources. The Joint Space Management Board 
Executive Committee includes the Under Secretary of Defcn.se for Acquisition & Technology 
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and Deputy Director of Central Intelligence, co-chairs: the Vice-Chairman of the Joint Chiefs of 
Staff: and the Executive Director. Intelligence Community Affairs. 

(U) Earlier, in December 1994. the DEPSECDEF establi.shcd a DUSD(Spacc) to provide 
the SECDEF a single point of contact for space matters. Responsible for oversight of all DoD 
space acquisition and technology programs, the DUSD(Space) has all DoD fspace) acquisition 
funds under his control: a recent I^ogram Budget Directive"* also pul NRO funding, which is in 
the NFIP. under his review. The establishment of this position brings to three the number of 
OSD elements available to the SECDEF to provide oversight of the NRO; DUSD(Space). 
USD(Comptrollcr). and ASD(C3I). The USD (Comptroller) took an active role in the 1995 
review of the FY 97 NRP budget submission, and the ASD(C3I) continues to exercise its charter 
responsibility for national rcconnai.s.sance programs. Including the NRO. 

(U) The establishment of various boards and oversight offices is difficult to reconcile 
with the charter documents, which included expressions like "streamlined management 
procedures." and "not subject to normal staff review." In the 1990s, then, the NRO finds itself 
the subject of oversight from three different OSD offices, one CIA office, one DCI staff office, 
and three different management board.s. in addition to the SECDEF and DCI. 

(U) Finally, one additional event occurred in the 1990's that impacted the original chancr 
documents. The NRO was chartered covertly to protect both its operations and the "fact of" its 
existence. In September 1992. however, the DEPSECDEF issued a press release acknowledging 
the cxi.stcnce of the NRO. and the Intelligence Reorganization Act of 1992 recognized in law for 
the first time the "National Reconnaissance Office (NRO) of the Department of Defense." 
parallel to the NSA. DIA, and CIO. 

(U) Attempts to Change the Charter 

(U) Over the past 30 years a number of efforts have been undertaken to revise, 
strengthen, .solidify, or otherwise modify the NRO charter documents to reduce NRO 
vulnerability to change. Periodic findings of charter sufficiency, such as those by the 19K9 
Geiger-Kclly Study, have not diminished attempts to change the NRO chancr. The NRO has 
been a panner to these effons primarily to ensure retention of its unique .status. 

(U) The first attempt to modify the charter occurred in 1971. Continuing for a period of 
several years, efforts were undertaken to provide a non-DoD chartering instrument, an NSC 
Intelligence Directive. That initiative was prompted by President Nixon's 1971 memo directing 
reorganization of the Intelligence Community to include rewriting all the NSC Intelligence 
Directives. The draft NSC Intelligence Directives for the .NRP/NRO contained the essential 
provisions of the 1%5 Agreement. Although the NRP/NRO had no chartering document on the 
DCI NSC side, the NRO kept open for several years the effort to promulgaic.lf not a DCID. an 
NSC Intelligence Directive for the .NRP. While an impasse was reached in 1973 due to wording 
that relegated the DCI to a role of coordination, additional attempts to update the NRO charter " 
continued in both 1974 and 1976 outside the NSC Intelligence Directive framework. 

(U) Both the 1974 and 1976 efforts were fairly short-lived, although the 1976 effort 
received backing from the CFl. Written by NRO staff to incorporate organizational changes 
resulting from Executive Order 11905 and to strengthen the DNRO's control over the NRP. the 
1976 rcvi.scd NRP chancr apparently gained SECDEF approval before being forwarded to ihc 
CFl. A CFI ta.sk group was formed to prepare a CFI Directive for the NRP.'but this initiative, 
like others before it, stalled when agreement could not be rcached. 


■* Program Bu Jgci Directive 701. Idcniificatioit of Space Programs. 7 November 1995. 
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(P®y©i) In I9H7. the NRO staf f again started work on redrafting the NRO charter. This 
lime, however, they investigated the desirability of .seeking legislation to c.stablish a fomtal 
chancr for the NRO. Legal consensus determined that the NRO was better off operating ".status- 
tiuo". as there were too many vested interests that would cause further erosion on the 
management side, and resulting legislation would be very restrictive. 

fS*) Other attempts to update the chancr include a draft memorandum of agreement 
between the SECDEF and the DCl contained in the 19K9 Geiger-Kclly study, and a 14 
September 1992 working paper draft DoD Directive. Tlie Oeiger-Kelly draft was basically a 
reaffirmation of the basic charter of the NRO and the dual responsibilities of the DNRO to the 
SECDEF and the DCI. and would not have replaced the 1965 agreement. The 1992 draft DoD 
Directive, cla.ssificd Secret/BYEMAN but with a note "For Publication as UNCLASSIFIED 
After Approval", was apparently prepared in anticipation of the IK September 1992 DoD prc.ss 
release acknowledging the existence of the NRO. The DoD Directive was dated 1 October 1992 
and would have cancelled the 1964 Directive, but it was never i.ssued. 

(U) Despite the oft-repeated as.scrtion that the NRO charter has withstood the test of time, 
the past 30 years have nonetheless seen significant changes in the environment, structure, and 
oversight of the NRO. It is no longer a covert organization, but has been publicly recognized in 
law as a Dcfcn.se agency. There is increasing interest in its operation and oversight, e.s^'ially 
within DoD and the Congress. As a rc.sult. public requests for copies of the NRO chaner are * 
increasing, and it is even the subject of an extensive Federation of American Scientists file on 
the Internet. As public scrutiny of the organization and its operations expands, the impacts of 
these changes become more readily apparent. 
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APPENDIX C fflSTORICAL DOCUMENT BIBLIOGRAPHY (U) 


(U) The inspection team gathered the below listed documents to research the authorities issue of 
the NRO inspection. The team provided the documents in a series of binders to the NRO 
Inspector General's office for future use in research, inspections, evaluations, and audits. 


a*) AGREEMENTS 

DEPSECDEF Letter to DCI. "Re: Management of the National Reconnaissance Program." 
September 6. 1961 {THE 1961 AGREEMENT). ( TO Opuuiul Ila i idlin g). 

"Agreement Between Secretary of Defense and the Director of Central Intelligence on 
Respon.sibilitics of the National Reconnaissance Office (■‘P&l." May 2.1962 {THE 1962 
AGREEMENT). ( T0j‘D¥C 1102 62 ). 

"Memorandum of Agreement Concerning NSA Participation in the National Reconnaissance 
Office." June 1962. (!»). 

"Agreement Between the Secretary of Defense and the Director of Central intelligence on 
Manauement of the National Reconnaissance Program." March 13.1963 {THE 1963 
AGREEMENT). ( TO i iDTC GCgfi 03). 

"Agreement for Reorganization of the National Reconnai.ssance Program." August 11.1965 
{THE 1965 AGREEMENT) ( T S /BYE 567) j ! 65 ) with DCI Utter of Transmittal to SECDEF. 
August 13. 1965. ( TOi ' DVE 65 ). 

"Memorandum of Understanding between the Director. National Reconnaissance Office and the 
Chief of Naval Operations." December 31.1974. ( TOiiDVL 13.i.13>ii t). 

"Memorandum of Understanding between the National Reconnaissance Office (NRO) and the 
Office of the Secretary of the Army." December 31.1974. (T3)'!IVBTKCO). 

'Memorandum of Understanding between The Director. National Reconnaissance Office and 
The Assi.stant Seerctarv of the Navy. Installation and Logistics." July 9.1976, 

5 601 1 0 76 ). 

"Memorandum of Agreement Between the National Reconnaissance Office (NRO) and the 
Defcn.se Mapping Agency (DMA)." September 9. 19H3, ( TOi'DVD ). 

"Memorandum of Agreement between the Intelligence Community Staff (ICS), the Defcn.se 
Intelliucncc Acenev (DIA) and the National Reconnaissance Office (N'RO)." December 13. 
19KN.( a.i'D^lT: I3 4 ('l 4 () ' llll ). 

"Memorandum of Agreement. National Reconnaissance Review Board." October 20.19X9. 
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"Memorandum of Agreement between National Reconnaissance Office. Inspector General and 
Central Intelligence Agency. Inspector General on Implementation of NRO/IG Charter 
Directive." February 22.19W. 

"Memorandum of Understanding between National Reconnaissance Offic e. Office of the 
Secretary of Defense and Central Intelligence Agency," October 1. 1991, (Si'D'i'E 1D7911'Dl). 

"Charter for Joint Space Management Board," December 13 1995. (U). 

"Intelligence Program Review Group Charter." draft as of December. 1995. (U) 

AUTHORITY DELEGATIONS 

DEPSECDEF Memorandum, "DoD Satcllite-Bome Earth Sensinu and Space Shuttle Planning 
Activities." atober 17.1972. ( TyD'iTI 

Assistant Secretary of the Navy. Installations & Logistics Memorandum for Manager. Navy 
Space Project. "Delegation of Authority and Designation as Head of a Procuring Activity," July 
9. 1976. (U). 

DEPSECDEF Memorandum. "Defense Reconnaissance Support Program (DRSP)," September 
II. I9S0. 

Under Secretary of Defense (Acquisition) Memorandum, "Delegation of Authority to Approve 
Contracts Awarded Under Other Than Competitive Procedures," February 20. 1991 

with DNRO Memorandum for USD(A). same subject, undated. (TOi'DVL 


Secretary of the Air Force Memorandum. "Delegation of Authority to Director, National 
Reconnaissance Office (U)." undated 1994, (OiuTvtKOO ). 

DEPSECDEF .Memorandum. "National Reconnaissance Office." (desicnated DNRO). Mav 26. 
1994. (U). 


DCl Mcmonindum. 



(b)(1) 1.4(c). (b)(3) 10 use 424 



DNRO .Memorandum. "Delegation of Contracting and Senior Procurement Executive Authority; 
and Designation as Head of the Contracting Activity." December 27.1994. 


BRIEFINGS 


"NRO Evolution and Overview." September 11.1995 Video, Cl 2S()-XX. ( yDVE ). 

"Legal Status of NRO," September 11. 1995 Video. Cl 334. (ferpYU). 

"Internal Management Controls." September 18. 1995 Video Cl 332, (WBYE). 

"Contracting in the NRO." Office of Contracts. September 14.1995 Video C1296 ( yP¥C ). 

"NRO Military Support Staff (MSS)." Defense Support Project Office, September 21. 1995. 
( M -I- V - TKCO ). 
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BUDGET DOCUMENTS 

Fiscal Year 1991 Congressional Budget Justification. Volume IV. National Reconnaissance 
Program. January 1990. (TSi'DVD 27fig7|i9 0). 

Fiscal Year 1992^1993 Congressional Budget Jus^tification. Volume IV. National 
Reconnaissance Program. January 1991, (TSifWMWSWI). 

Fiscal Year 1993 Congressional Budget Justification. Volume IV. National Reconnaissance 
Program. January 1992. ( TBi ' D'iT: 27eri7 /92). 

Fiscal Year 1994-1995 Congressional Budget Justification. Volume IV. National 
Reconnaissance Program. .March 1993. (TSTBTPWfWT^). 

Fiscal Year 1995 Congressional Budget Justification. Volume IV. National Rcconnui.ssancc 
Program. February 1994. ( TS ' DVE a?(iji? i t9 4). 

Fi.scal Year 1996-1997 Congressional Budget Justification. Volume IV. National 
Rcconnais.sance Program. February 1995. ). 

DIRECTIVES and ORDERS 

Executive Orders and Presidential Directives 

Presidential Memorandum. "Organization and Management of the U.S. Foreign Intelligence 
Community." November 1971. (TSTBTPT???Tm)." 

Executive Order 11905. "United States Foreign Intelligence Activities." February IS. 1976. (U). 
Presidential Directive.'NSC-I7. "Reorganization of the Intelligence Community." August 1977. 

&m^). 

Executive Order 12036. "United States Intelligence Activitic.s." January 24.197S. (U). 

Executive Order 12333. "United States Intelligence Activitic.s." December 4. 19X1. (U). 

Executive Order 12334. "President's Intelligence Oversight Board." December 4. 19X1. (U). 

National Security Decision Directive Number 42, "National Space Policy." July 4.19X2. (TS) 

Executive Order 12537. "President's Foreign Intelligence Advisory Board," October 28, 1985. 
(U). 

Presidential .Memorandum. "DoD/DCl'PFlAB Report on the National Reconnaissance Office 
(NRO) (3 ' P 'l 'E )." Fcbniary 11.1985. (&<DYD D610> 86 ). 

National Security Decision Directive Number 293, "National Space Policy (U)." January 5. 
19^». (Ttji>ll>fDTKCO ). 

National Security Directive 30. "National Space Policy Directive 1." November 2.1989. 

National Security Directive 67. "Intelligence Capabilities; 1992-2005 (U>." March 30.1992. 
(Sif'HVTIiCQ). 
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Presidential Decision Directive/NSC-35. "Intelligence Priorities." March 2. 1995,^. 

Department of Defense 

DoD Directive 3305.5, "General Defense Intelligence Prosiram (GDIP) Management." May 9. 
1986, (U). 

DoD Dircetive 3500.1, "Defense Space Council (DSC)." December 29,1988. (U). 

DoD Instruction 4000.19. "Interservice and Intragovemmental Support." August 9.1995. (U). 

DoD Direedve 5000.1. "Defense Acquisition," February 23,1991, (U). 

DoD Directive 5025.1. "DoD Directives System," June 24.1994. (U). 

DoD Directive 5100.20, "The National Security Agency and the Central Security Service." 
December 23. 1971. (U). 

DoD Directive 5100.23. "Administrative Arrangements for the National Security Aticney." May 
17. 1967. (U). 

DoD Directive 5100.81, "Department of Defense Support Activities (DS As)." December 5. 

1991. (U). 

DoD Directive 5100.85, "Intelligence Sy.stems Board (ISB)." June 27. 1995. (U). 

DoD Directive 5105.15. "Department of Defense Advanced Re.search Projects Ai»cncy." March 
17. 1959. (U). 

DoD Directive 5105.21. "Defense Intelligence Agency." May 19.1977, (U). 

DoD Directive TS-5105.23. "(■&) National Reconnai.ssancc Office." March 27, 1964. (Wl. 

DoD Directive 5105.40, "Defense Mapping Agency (DMA)." December 6,1990. (U). 

DoD Directive 5105.56, "Central Imagery Office." May 6.1992. (U). 

DoD Directive 5118.3. "Comptroller of the Department of Defense (C. DoD). June 24. 1991 
(U). 

DoD Directive 5134.1, "Under Secretary ofDcfcn.se for Acquisition and Technology 
(USD(A&T))." June 8.1994, (U). 

DoD Directive 5134.11, "Defense Airborne Reconnai.ssancc Office (DARO)" April 5.1995. (U). 

DoD Directive 5137.10. "A.ssistant Secretary of Defense for Command. Control, 
Communications, and Intelligence (ASD(C3I))." February 12. 1992. (U). 

DoD Directive 5160.32. "Development of Space Systems." September 8. 1970. (U). 

DoD Directive 0-5205.7. "Special Access Program (SA) Policy." January 4.1989, (FQUO). 

DoD Directive 5240.1. "DoD Intelligence Activities," April 25,1988. (U). 
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National Reconnaissance Office 

National Reconnaissance Program Directive 1, "Security Policy," August 9.1971. (TST^TC 
1 30 4 0 7 1). 

NRO Office of Contracts Interim Contracts Policy Directive Number 001. "Interim Contracts 
Policy Directive Framework." January 12,1995. 

National Reconnaissance Program Directive 2, "Security Handling of Covert Satellite SIGINT 
Collection Projects and Control of Raw SIGINT Intelligence," December 3.1962, CKiiBYg- 

NRO Office of Contracts Interim Contracts Policy Directive Number 002. "NRO Contracting 
Authority." January 12. 199.5. ( S/IIVDCO ). 

National Reconnaissance Office Directive 3, "Access Approval and Criteria Policy." December 
22. 1992. (BillVDTI i ICCO ). 

National Reconnaissance Program Directive 4. "Physical Security Policy." August 27.1971. 
( T0i ‘ DVE 130 4 0 7 1). 

NRO Office of Contracts Interim Contracts Policy Directive 004. "NRO Competition Advocates. 
Authorities. Format, and Cla.ss Justifications." August 23. 1995. 

NRO Office of Contracts Interim Contracts Policy Directive 010. "National Programs Contract 
Review Board." May 3. 1995. ( OjaiVDCQ ). 

NRO Directive 90-1, "NRO Inspector General," January 10.1990. (fli'DTC Iljl.l003ii[j0 ). 

NRO Directive 7. "NRO Acquisition Management," January 19. 1993. 

NRO Office of the Comptroller, NRO Financial Procedures. October 12,1995. (’P9 j‘W¥B€©). 
Other 

DCI Directive No. 1/14. January 22.1967. (6). 

DCI Directive No. 2/9-1, "Management of National Imagery Intelligence." June 1.1992. (#). 

DCI Directive No. 3/2 "Intelligence Community Executive Committee," June 1. 1992. (U). 

DCI Directive No. 3/3-1 "Community Management Staff," June 1,1992, (U). 

DCI Directive No. 3/4 "Intelligence Research and Development Council." June 1.1992. (U). 

DCI Dircetive No. 1/19 "Security Policy for Sensitive Compartmcnlcd Information," March 1. 
1995, (U). 

National Security Council Intelligence Directive No. 6. "Signals Intellicence," February 17, 
1972. ( TOilDVDOJd 7 2). 

Secretary of the Air Force Order No. 100.1. "Functions of the Secretary. Under Secretary and 
the Assistant Secretaries of the Air Force," May 1,1990, (U) 
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BYEMAN Security Manual. June 9.1993. 

INTERVIEWS 

Acting Deputy Assistant Secretary of Defense (Intelligence & Security), and 
staff. December 4,1995. 

Deputy Under Secretary of Defense (Space), Principal 

Assistant. December 13.1995. 

Executive Director. Intelligence Community Affairs. December 11.1995. 

Director, and Deputy Director. National Reconnaissance 

Office, November 13.1995. 

former Deputy Director, andS^^S^^jH, Associate Deputy Director 
for Science & Technology, Central Intelligence Agencyn5eccm^ 18,1995. 

Deputy Director for Program Evaluation, C4I Integration Support Activity. 

Decembc^nW5. 

LAW AND LEGISLATIVE HISTORY 

National Security Act of 1947. as amended (Title 50, U.S.C.. Chapter 15). 

Central Intelligence Agency Act of 1949. as amended (Title 50. U.S.C., Sections 403a throuch 
403s). 

National Security Agency Act of 1959. May 29,1959 (Title .50. U.S.C.. Section 402notc). 

Title 5. U.S.C.. Chapters 1,3.31,33. and 51. 

Title 10. U.S.C.. Chapters 1 through 4. 8.81.83.137 and 803. 

Title 31, U.S.C., Chapter 15, Subchapter Ill (The Economy Act), 

Title 41. U.S.C., Chapters 4 and 7. 

Title 50. U.S.C., Chapter 29. 

Hou.se Conference Report No. 102-963. October 1,1993 (to accompany Public Law 102-496. 
Intelligence Authorization Act for 1993. containing the Intelligence Organization Act Of 1992). 

Classified Annex to the Joint Expianatory Statement of the Committee of Conference, October 8. 
1992 (to accompany the Intelligence Authorization Act for 1993) ('P6i‘©¥648!HW>2), 

House Conference Report 104-427. December 20.1995 (to accompany the Intelligence 
Authorization Act for Fiscal Year 1996). 

Classified Annex to the Joint Explanatory Statement of the Committee of Conference (to 
accompany the Intelligence Authorization Act for Fiscal Year 1996) ( TOyOVE) . 
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Classified Report to the Joint Explanatory Statement of the Committee of Conference to 
Accompany the Conference Report on H.R. 2126 (Department of Defense Appropriation Bill 
for Fiscal Year 1996) ( TBi>D¥E ). 

MEMORANDA, LETTERS, OTHER 

Presidential Memorandum for the Secretary of State and the Secretary of Defense. 
"Communications Intelligence Activities." October 24. 19.^2. (U). 

NSC .^412/2, "Note by the Executive Secretary to the National Security Council on Covert 
Operations." December 2K. 1955. (U). 

NSC Action No. 1K46. "Record of Actions by the .National Security Council at its Three 
Hundred and Fifty Second Meeiinc held on January 22.1958. (Approved bv the President. 
January 24.1958)." (U). 

NSC 58)4.1. "Preliminary U.S. Policy on Outer Space." (redacted version). Auaust 18.1958. 

(C). 

NSC .Memorandum for the Secretary of Defense. "Reconnaissance Satellite Program." 
September 1. I960. 

SECDEF Memorandum. "(TS) Assistant for Reconnaissance. September 6. 1961. (TSl. 

DNRO Memorandum for NRO Program Directors." Oruanization and Functions if the NRO." 
July 2.^. 1962. ( TO^DVE 62 ). 

Assisiam to the President Memorandum for the SECDEF and DCI. "National Reconnaissance 
Office (President's Forciun Intelligence Advisory Board Recommendation No. 23)." Julv 6. 
1962. (TSrBTPtWS9«e2'). 

President’s Foreign Intclliccncc Advisory Board Memorandum for the President. "National 
Reconnuissiuicc Program." May 2.1964. (Tg(M\fBTIf.g(rO Bgy 04()6ai(6i1). 

DNRO Memorandum. "Special Suppon Activities Funding under the Missile Procurement 
Appropriation." May 7.1964. (S). 

Assistant to the President Memorandum for SECDEF and DCI. "National Reconnaissance 
Program." May 22.1964. ( TSidn i rDTKCCO ). 

Under Secretary of the Air Force Memorandum for Director of Special Projects. OSAF. 
"Authorization to Deviate from Air Force Directives." June 23. 1965. 

Committee on Foreign Intelligence Tusk Group Memorandum. "Revision of NRP CThancr." 
March 17. 1976. ( TO/D¥L 111226 76 ). 

DNRO Memorandum for President’s Foreign Intelligence Advisory Board. "Authority for the 
Establishment of the .National Reconnaissance Program." May 19. 1976. (T9rD¥E I29‘l7»'?i5). 

SECDEF Memorandum. "(S) National Reconnaissance Office" (interim chanac to DoDD TS- 
5105.23). October 3. 1979. (4i&). 

Chairman. President’s Foreign Intelligence Advisory Board Letter to the President, no subject 
(findings of NRO examination). December 23.1983. 
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Joint Rcpon (SECDEF. DCI and Chainnan. President's Foreign Intellieence Advisory* Board) to 
the President on the NRO. July 13.19K4. 

DNRO Letter to Chainnan. Senate Select Committee On Intelligence, no .subject (internal 
rc.stnjcluring of the NRO). November 21.198S. 

SECDEF/DCl Letter to Chairman, Senate Select Committee On Intelligence, no subject 
(strengthening the NRO). July 3.1989. (StTIVDCO). 


SECDEF Memorandum. "Additional Deputy Director Position in the National Reconnaissance 
Office (NRO)." January 26.1990. ( BidH i fTliiC O). 


DCI .Memorandum for DNRO. 


(b)(1) 1.4(c), (b)(3) 10 use 424 



SECDEF DCI Letter to Chairman. Senate Select Committee On Intelligence, no subject 
(forwards NRO reorganization plan). February 26. 1990. (TSnnWTITTTTrr??)). 

DNRO Memorandum for Chairman. Joint Chiefs of Staff. "Deputy Director Position of the 
National Reconnaissance Office (NRO)." April 19.1990. (Oi ‘ D^tn: 13611i'9 Q). 

NRO/Dircctor for Congressional Affairs Memorandum for Congrc.ssional Committee staffs. 
"Briefing Chart.s" ("NRO Human Resources Requirements Study 1990-1991" and "NRO 
Bycman Security Center Overview/Status). March 2K. 1991. 193i'91), 

DEPSECDEF Memorandum. "National Reconnaissance Office (NRO) and DoD Directive 
5(XK).l." August 27.1991. ( O i 'DTC bjWtW l). 

Senate Select Committee On Intelligence Minority Staff Director/Gencral Counsel Letter to 
NHO 10. no subject (lack of CIA IG .statutory responsibilities foroversicht of .NRO activities). 
October 26. 1993. (U). 

DEPSECDEF Memorandum. "Establi.shmcnt of the Dcfcn.se Airborne Rcconnai.ssancc Office 
(DARO)." November 6. 1993, (U). 

DEPSECDEF Letter to DCI. no .subject (ASD(C31) initiative to establish a declassification 
review group). February 2.1994. (S)‘B¥e"6^**^#)!i‘94). 

DDN’RO Memorandum for SECDEF. "Department of Justice Request for Declassification...." 
February 10, 1994. ( D)iDVC 2 1 1577/9 4). 


DDNRO .Memorandum for ASD(C3I). "Congrc.ssionallv Directed Action—Thc Inspector 
Genei^unction - INFORMATION MEMORANDUM." February 10.1994. ( Oi'D'iT: 


ClA/Officc of General Coumscl, 


(b)(3) 10 use 


1(b)(3) 10 use 424, (b)(5) 


DEPSECDEF Memorandum. "Establishment of the Deputy Under Secretary of Defense for 
Space Acquisition and Technology Programs." December 10.1994, (U). 

DEPSECDEF Memorandum. "Responsibilities and Functions of the Deputy Under Secretary of 
Defense for Space," March S. 1995. (U). 
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DNRO Letter to Assistant Inspector General for Audits. IG. DoD. "Response to Draft Audit 
Report on Implementation of the Internal Management Control Program at the NRO (Project No. 
.^RC-0035.01)." March 1.1995. (Q)‘DTC ami!) 1^9 5). 

NRO/Office of General Counsel. "Legal Justification for NRO Deviations from the FAR." 
Attorney Work Product. March 1995. (U>. 

DEPSECDEF Memorandum. "Establishment of the Defense Airborne Reconnaissance Office 
(DAROr Aprils. 1995. (U). 

House Permanent Select Committee on Intelligence Letter to DEPSECDEF. no subject (requests 
examination of NRO "forward funding"). August 21.1995. (■&). 

DCI'SECDEF Letter to Chairman. House Permanent Select Committee on Intelligence, no 
subject. October 24,1995TS1. forwards "Review of the NRO Reallocation Request". (■ TB ' D> > T: 
2( ) ll70fl ' 9.n ). 

Procram Budact Decision No. 701. November?. 1995, approved by DEPSECDEF, November 
21.1995. fSi. 

DEPSECDEF Memorandum for DCl. "Chancr for a Financial Manaeemcnt Executive of the 
NRO." November 16.1995. (U). 

ASD(C3I) Memorandum for DNRO. "SECDEF Annual Defense Report." November 29.1995. 

(U). 


(b)(1) 1.4(c). (b)(3) 10 use 424 


DCl/DEPSECDEF Memorandum for Joint Space Management Board. "Review of .National 
Reconnaissance Office Programs and Activities." December 13.1995. (U). 

USD(A&T) Memorandum. "DoD Co-Executive Secretary of the Joint Space Management 
Board." January 3. 1996. (U). 


NRO/Office of General Counsel Memorandum. "Respon.se to Inquiry Recardinc NRO Legal 
Issues." February' 2S, 1996. 


"lA/Qfficc of General Counsel M emora ndum, 


(b)(1) 1.4(c). (b)(3) 10 use 424 


DoD/Ofllce of the Deputy General Counsel (Inspector General) Memorandum. "Legal Issues 
Arising from National Reconnaissance Office (NRO) Review." March 5.1996. (U). 


CIA/Generai Coun.sc l Memorandum. 

!.(«■). 


(b)(1) 1.4(c). (b)(3) 10 


(b)(1) 1.4(c). (b)(3) 10 


:ctor General Memorandum. 


(b)(1) 1.4(c) (b)(3) 10 use 424 (b)(5) 


ClA/Principal Deputy General Coumsel Memorandum. "Draft Joint Inspection Report on NRO." 
15 May 1996. (U) 
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*'A Summary of the National Reconnaissance Probiem." May 1?. 1965 draft. 
(TO 'i DVDOaOl 0 5). 

DEPSECDEF Memorandum. "Reconnaissance Operations (U)." February H. 196S. (TSi^B^E 

7nff9®0W). 


DEPSECDEF Memorandum. "Reconnaissance Operations (U)." March 21,1968. (TSfB¥E 


DoD OIG: (b)(6) 


1969. (TCiiDVC ). 


DoD OIG; (b)(6) 


untitled paper (issues confronting the NRO). undated, probably 


DoD OIG: (b)(6) 


Memorandum to 
.Air Vehicle Reconnaissance Projects." July 1, 1%9. (^FS^S^E) 


"NRO Responsibilities for NRP 


(b)(1) 1.4(c) (b)(3) 10 use 424 (b)(5) 
DoD - 


Director Science and Tcchnolouy. CIA. June 197.3. ( 




" Approved bv| 
X)-72). 


"Plan for the Defense Reconnaissance Support Program (DRSP)." Approved by DEPSECDEF. 
September 11. 1980. ( TS^DVD 066093^ 0). 


Hi.story of the National Reconnaissance Program: 

Volume 1. "The Corona Story." December 1988. ( Oi i Nr ii OfteQMjaiVDTKOO DV E 

Volume II. "The Hexaaon Story." December 1992. 0)9 i TiORCON '1IVDTICCO DV E 


Volume III. ’The Gambit Story." June 1991. OiNn'ORGO.Mi ' llVDTKOO D¥C 1^00 2- 


Volume IV. "The SIGINT Satellite Story," December 1994. 
(TSitMri/OnCOMidlVDTKCCQ BYE 0101 01); 


Volume V, "Thei 
th i 'e tra h i lOODVGM ). 


Story." unpublished draft. ( TOi'lIVDTKCO DIF 0521D lOOJi i 'O ' I 


"NRO Charter and Management Evolution" (chronoloav of events), author unknown, undated, 
circa February 1989. ( TS i 'BYi l ^^a ftltyp ). 


"Repon to the Director National Reconnai.ssance Office. ".NRO Restructure Study Briefing" [The 
Geiger Sn«/v). Volumes I and II. (TS»^¥fT2l M WI»89), 

National Reconnaissance Office. "Report to the Secretary of Dcfcn.se and Director of Central 
Intelligence regarding NRO Restructure." January 8.1990. ( TO/DVE 277()()i»J O). ■ 

DNRO Memorandum for SECDEF and DCI. "Report on the National Reconnaissance Office 
Rcstnicture." undated, circa February I99O.'fl*0j‘#¥&^W^^F)‘9()). 

SECDEF/DCI Letter to Chairman. Senate Select Committee On Intelligence, no subject 
(transmits report on NRO restructure). Fcbmary 26.1990. (TS/BYB aVTOUW)). 
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"DCI Task Force on the National Reconnaissance Office. Final Repon" (The Fuhrman Report). 
April 1992. (fiifllVBTKCO). 

"Final Repon: National Reconnaissance Program Task Force for the Director of Central 
lnielligcncc”(r/je Woolsey Report). September 1992, (¥Si‘ft¥&+W4i^2). 

DNllO Memorandum for the DCI. "NRO Review of BYEM AN Classification and Protection." 
November.^. 1992. (SmTPTWTTO). 

NRO Protection Review. "What is Bycman." November 6.1992. 

NRO Restructure Guidance Document. Revision #2. January 15.199.^. approved by DNRO 
January 26.1993. ( TOD¥C ). 

National Reconnaissance Office (NRO) Restructure Implementation Master Plan (IMP). Janu;irv 
1993. ( T0iD\fE ). 

NRO Strategic Plan, undated 1993. (Si'^lTiaiVTKCO TCP 1093/9 3). 

"NRO Baseline Repon Prepared for the Commission on Roles and Capabilities of the U.S. 
Intelligence Community." April 1995. 

Ccmral Intelligence Agency. "A Consumer's Guide to Intelligence." July 1995. (U). 

0 

Statutes Working Group. National Imagery Agency Task Force. "Analysis of the Statutes 
Working Group" Task 520 Deliverable. August 16.1S)95, 
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|b)(6)^ 


Kb)(6) 



(b) (6) 
(bH6? 

KhsT 


Inspection Director. 

DoD/lG 

Assistant Inspection Director 
CIA/IG 

Deputy Inspection Director 
DoD/lG 

Inspector. ClA/lG 
Inspector. NSA'IG 
Evaluator. DoD/IG 
Evaluator. DoD/IG 
Inspector. DoD/IG 
Auditor. ClA/IG 
Inspector. DoD/IG 
Inspector. DoD/JG 
Evaluator. DoD/lG 
Inspector. DoD/IG 
Inspector. DoD/IG 
Auditor. DoD/IG 
Inspector. DoD'IG 
Evaluator. DoD'IG 
Inspector. DoD/IG 
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APPENDIX E SITES VISITED (U) 


(U) Office of the Sccrctiirv of Defense 


(U) Assisiant Secretary of Defense (Command. Control. Communications and 
Intelligence) 

(U) Deputy Under-Secretary of Defense (Space) 

(U) Defense Agencies And Organizations 


(S)*) National Reconnaissance Office 

Hcadouarters fadlitics inthcNation^^ 


(b)(1)(c) (b)(3) louse 424 


Los Angeles Air Station 
Naval Research Laboratory 


(U) Central Imagery Office 


(U) Defense Contract Audit Agency 

Field Detachment Hcadquaners 

(U) Defense Intelligence Agency 

(U) Defense Mapping Agency 

National Imagery Agency Task Force 


(U) National Security Agency 
(U) Naval Supply Systems Command 


d’) Other Federal Agencies 


(U) Central Intelligence Agency 

Directorate of Science and Technology 
Office of the General Counsel 
Office of Personnel 

National Photographic Interpretation Center 


(U) Director. Central Intelligence 

Community Management Staff 


(U) Contractors 




(b)(1)(c) (b)(3) 10 use 424 
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APPENDIX F ACRONYMS 


AIS (U) Automated Information System 

AISSM (U) AIS Security Manual 

ASD (U) Assistant Secretary of Defense 

BSM (S/B) BYEMAN Security Manual 

C31 (U) Command. Control. Communications and Intelligence 

CCB (U) Configuration Control Board 


(b)(1)(c) ^^^■(b)(1)(c) (b)(3) 10 use 424 


CFI 


CIA 

CIO 



eWAN 

DASD 

DCl 

DCID 

DDMS 

DEPSECDEF 


DIA 

DKRO 

DOS 

DSPO 

DUSD 


DoD 


DoDD 

EEO 

EXCOM 

FY 

FAR 

GPRA 

GSA 

GWAN 

HRMG 

IG 

IMC 

IMINT 

IRM 

ITG 

MOA 

MOL* 

MPD 

MS&O 

NAM 


NFIP 


NIMA 

NRO 

NRP 

.NSA 


(U) Committee on Foreign Intelligence 
(U) Central Intelligence Agency 
(U) Central Imagery Office _ 


(b)(1)(c) (b)(3) 10 use 424 


(U) Contracting Officer’s Technical Representative 
(LI) Contractor Wide Area Network 
(U) Deputy Assistant Secretary' of Defense 
(U) Director of Central Intelligence 
(LI) DCI Directive 

(U) Deputy Director for Military Suppon 

(U) Deputy Secretary of Defense 

(U) Defense Intelligence Agency 

(L’) Director. National Reconnaissance Office 

(U) Director of Security 

(C) Defense Support Project Office 

(U) Deputy Under Secretary of Defense 

(U) Department of Defense 

(U) DoD Directive 

(U) Equal Employment Opportunity 

(LI) Executive Committee 

(U) Fiscal Year 

(U) Federal Acquisition Regulation 
(U) Government Performance and Results Act 
(U) General Services Administration 
(U) Government Wide Area Network 
(U) Human Resources Management Group 
(U) Inspector General 
(LI) Internal Management Controls 
(LI) Imagery Intelligence 
(U) Information Resources Management 
Information Technology Group 
(LI) Memorandum of Agreement 
(L") Memorandum of Understanding 
(U) Military Personnel Division of HRMG 
(U) Management Services and Operations Office 
(LI) NRO Acquisition Manual 
(LI) National Foreign Intelligence Program 
(U) National Imagery and Mapping Agency 
(U) National Reconnaissance Office 
(U) National Reconnaissance Program 
(U) .National Security Agency 
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N5>r 


(b)(3) louse 424 


OMB 
OSD 
OSO 
P&A 
PFIAB 
Program A 
Program B 
Program C 

sef 

SECDEF 

STGINT 

USAF 

USD 


(U) Office of the Secretary of Defense 

(U) Operational Support Office 

(U) Plans and Analysis Office 

(U) President's Foreign Intelligence Advisory Board 

(U) Air Force Program prior to 1992 restructure 

(U) CIA Program prior to 1992 restructure 

(U) Navy NRP Program prior to 1992 restructure 

(U) Sensitive Compartmented Information 

(U) Secretary of Defense 

(U) Signals Intelligence 

(U) United States Air Force 

(U) Under Secretary of Defense 
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